Full-disclosure - Dec-2007 Week 1

Readlist -> Full-disclosure -> Dec-2007-week-1 Dec-2007-week-2 Dec-2007-week-3 Dec-2007-week-4

	13 msgs	Compromise of Tor, anonymizing networks/utilities	(08 Dec 2007 )
	1 msg	[SECURITY] [DSA 1426-1] New qt-x11-free packagesfix several vulnerabilities	(08 Dec 2007 )
	1 msg	[SECURITY] [DSA 1425-1] New xulrunner packagesfix several vulnerabilities	(08 Dec 2007 )
	1 msg	[SECURITY] [DSA 1424-1] New iceweasel packagesfix several vulnerabilities	(08 Dec 2007 )
	1 msg	[USN-555-1] e2fsprogs vulnerability	(08 Dec 2007 )
	1 msg	Upload directory traversal in Easy File Sharing4.5	(07 Dec 2007 )
	1 msg	Multiple vulnerabilities in Firefly Media Server (mt-daapd) 2.4.1 / SVN 1699	(07 Dec 2007 )
	1 msg	Two vulnerabilities in Simple HTTPD 1.38	(07 Dec 2007 )
	1 msg	Limited upload directory traversal in HTTP File Server 2.2a / 2.3 beta (build #146)	(07 Dec 2007 )
	1 msg	[ MDKSA-2007:240 ] - Updated libnfsidmap packages fix username lookup flaw	(07 Dec 2007 )
	1 msg	Sign the Downing Street E-Petition Submitted byNeil Stinchcombe of Infosecurity Europe	(07 Dec 2007 )
	1 msg	[SECURITY] [DSA 1423-1] New sitebar packages fixseveral vulnerabilities	(07 Dec 2007 )
	2 msgs	MIT Kerberos 5: Multiple vulnerabilities	(07 Dec 2007 )
	1 msg	Heimdal ftpd uninitialized vulnerability	(07 Dec 2007 )
	1 msg	netkit-ftpd/ftp uninitialized vulnerability	(07 Dec 2007 )
	1 msg	[SECURITY] [DSA 1422-1] New e2fsprogs packagesfix arbitrary code execution	(07 Dec 2007 )
	1 msg	Re: b0b27a223b66678f24aec254366526d7910d0f38679f6478804c7480d2271ce9[was: TCP Port randomization paper]	(07 Dec 2007 )
	36 msgs	Google / GMail bug, all accounts vulnerable	(07 Dec 2007 )
	1 msg	GOBBLE ALERT FOR PEOPLES !!	(07 Dec 2007 )
	1 msg	rPSA-2007-0260-1 firefox	(07 Dec 2007 )
	1 msg	[ MDKSA-2007:239 ] - Updated heimdal packages fix potential vulnerability	(07 Dec 2007 )
	1 msg	R7-0031: JFreeChart Image Map Cross-SiteScripting Vulnerabilities	(06 Dec 2007 )
	1 msg	ZDI-07-071: HP OpenView Network Node ManagerMultiple CGI Buffer Overflows	(06 Dec 2007 )
	5 msgs	TCP Port randomization paper	(06 Dec 2007 )
	1 msg	HackerSafe Labs - Security Advisory - XiglaAbsolute Banner Manager v4.0	(06 Dec 2007 )
	1 msg	[Security Advisorie] OpenNewsletter v2.5 MultipeXSS Attacks	(06 Dec 2007 )
	1 msg	ZDI-07-070: Skype skype4com URI Handler Remote Heap Corruption Vulnerability	(06 Dec 2007 )
	1 msg	[USN-554-1] teTeX and TeX Live vulnerabilities	(06 Dec 2007 )
	1 msg	[ MDKSA-2007:238 ] - Updated liblcms packagefixes buffer overflow	(06 Dec 2007 )
	2 msgs	[SECUNIA] Vendors still use the 'legal' weapon	(06 Dec 2007 )
	1 msg	[SECURITY] [DSA 1421-1] New wesnoth packages fixarbitrary file disclosure	(06 Dec 2007 )
	8 msgs	pcap flow extraction	(06 Dec 2007 )
	1 msg	Avast! AntiVirus TAR Processing Remote HeapCorruption	(06 Dec 2007 )
	1 msg	[SECURITY] [DSA 1420-1] New zabbix packages fixprivilege escalation	(06 Dec 2007 )
	1 msg	SUSE Security Announcement: samba(SUSE-SA:2007:065)	(06 Dec 2007 )
	2 msgs	[UPDATE]CA BrightStor ARCServe BackUp MessageEngine Remote Stack Overflow Vulnerability	(06 Dec 2007 )
	1 msg	Inside the 'Ron Paul' Spam Botnet	(06 Dec 2007 )
	1 msg	Defense board sounds louder alarm about foreignsoftware development	(05 Dec 2007 )
	1 msg	UPDATE: [ GLSA 200711-29 ] Samba: Execution ofarbitrary code	(05 Dec 2007 )
	1 msg	CiscoWorks Server XSS Vulnerability	(05 Dec 2007 )
	1 msg	Report: Foreign Countries Develop U.S. DefenseSystems Software	(05 Dec 2007 )
	1 msg	[ GLSA 200712-02 ] Cacti: SQL injection	(05 Dec 2007 )
	1 msg	[ GLSA 200712-01 ] Hugin: Insecure temporary filecreation	(05 Dec 2007 )
	1 msg	Re: GOBBLES or n3td3v	(05 Dec 2007 )
	1 msg	Cisco Security Advisory: Cisco Security Agent forWindows System Driver Remote Buffer Overflow Vulnerability	(05 Dec 2007 )
	1 msg	Information about recent malware exploitedvulnerabilities - a blog post	(05 Dec 2007 )
	7 msgs	Nokia N95 cellphone remote DoS using the SIP Stack	(05 Dec 2007 )
	1 msg	[SECURITY] [DSA 1419-1] New OpenOffice.orgpackages fix arbitrary Java code execution	(05 Dec 2007 )
	2 msgs	Cisco Phone 7940 remote DOS	(05 Dec 2007 )
	1 msg	XSS Early Warning Mailing List Now Open	(05 Dec 2007 )
	1 msg	rPSA-2007-0257-1 rsync	(05 Dec 2007 )
	3 msgs	0day XSS for MPAA.org	(05 Dec 2007 )
	1 msg	[ MDKSA-2007:237 ] - Updated openssl packages fixDTLS vulnerability	(05 Dec 2007 )
	1 msg	[ MDKSA-2007:236 ] - Updated openssh packages fix X11 cookie vulnerability	(05 Dec 2007 )
	1 msg	The recent number of unpatched QuickTime flawsis: two	(05 Dec 2007 )
	1 msg	[USN-553-1] Mono vulnerability	(05 Dec 2007 )
	1 msg	[USN-552-1] Perl vulnerability	(05 Dec 2007 )
	1 msg	Internet Explorer Vuln Report,Debunked [Jeff R. Jones is becoming FUD-master]	(04 Dec 2007 )
	1 msg	[USN-546-2] Firefox regression	(04 Dec 2007 )
	6 msgs	Professional IT Security Service Providers -Exposed	(04 Dec 2007 )
	1 msg	SecNiche Garbage Dumps on mailinglists	(04 Dec 2007 )
	1 msg	TIBCO Rendezvous Exploitation Video	(04 Dec 2007 )
	1 msg	The first release of SWFIntruder is out !	(04 Dec 2007 )
	1 msg	SEC Consult SA-20071204-0 :: SonicWALL Global VPNClient Format String Vulnerability	(04 Dec 2007 )
	1 msg	Firefox UTF-7 Universal XSS	(04 Dec 2007 )
	1 msg	[USN-549-2] PHP regression	(04 Dec 2007 )
	1 msg	[USN-551-1] OpenLDAP vulnerabilities	(04 Dec 2007 )
	5 msgs	Re: Anyone have a reason for 2x the email flowtoday?	(04 Dec 2007 )
	1 msg	[ MDKSA-2007:235 ] - Updated apache packages fixvulnerabilities	(03 Dec 2007 )
	1 msg	[ MDKSA-2007:234 ] - Updated vixie-cron packagesfix DoS vulnerability	(03 Dec 2007 )
	1 msg	[USN-550-1] Cairo vulnerability	(03 Dec 2007 )
	9 msgs	Anyone have a reason for 2x the email flow today?	(03 Dec 2007 )
	1 msg	Phioust is dead, long live Matasano !!!	(03 Dec 2007 )
	1 msg	unsubscribe full-disclosure	(03 Dec 2007 )
	6 msgs	SCADA refresher	(03 Dec 2007 )
	2 msgs	Web Beam,the new concept web application penetration testing tool	(02 Dec 2007 )
	1 msg	[SECURITY] [DSA 1418-1] New cacti packages fixSQL injection	(02 Dec 2007 )
	1 msg	Re: Phioust gets all emotional to gobbles andfriends...	(02 Dec 2007 )
	1 msg	Re: Signature or checksum?	(02 Dec 2007 )
	1 msg	[SECURITY] [DSA 1417-1] New asterisk packages fixSQL injection	(02 Dec 2007 )
	1 msg	Bypassing group policy	(02 Dec 2007 )
	4 msgs	need help in managing administrators	(02 Dec 2007 )
	10 msgs	Re: authentic hackers still do it for the love... (was: Hell Camp: It never pays enough)	(02 Dec 2007 )
	1 msg	Re: Signature or checksum? (was: MD5 consideredharmful)	(02 Dec 2007 )
	1 msg	Hell Camp: A Terrifying Story of Lies andMiddle-Men	(02 Dec 2007 )
	1 msg	Re: Full-Disclosure Digest, Vol 34, Issue 1	(01 Dec 2007 )
	2 msgs	Phioust is now getting really emotional ...	(01 Dec 2007 )
	1 msg	Firefox explicit charset inheritance	(01 Dec 2007 )
	1 msg	rPSA-2007-0255-1 nss_ldap	(01 Dec 2007 )
	7 msgs	Firefox 2.0.0.11 File Focus Stealing vulnerability	(01 Dec 2007 )
	9 msgs	MD5 algorithm considered toxic (and harmful)	(01 Dec 2007 )
	1 msg	Phioust gets all emotional to gobbles and friends...	(01 Dec 2007 )
	21 msgs	DC4420 - London DEFCON chapter Christmas Party -11th December	(01 Dec 2007 )
	1 msg	Re: ZDI-07-069: CA BrightStor ARCserve BackupMessage Engine Insecure Method Exposure Vulnerability	(01 Dec 2007 )