Re: [Full-disclosure] Dameware critical hole

2005-08-31 Thread Fergie (Paul Ferguson)
Dude, let's try ASCII messages in the future, okay? :-) In any event, we all know now: http://www.frsirt.com/english/advisories/2005/1596 - ferg ps. Hey, TheGesus, not picking on you -- you know better. ;-) -- "Fergie", a.k.a. Paul Ferguson Engineering Architecture for the Internet [EMAIL PR

Re: [Full-disclosure] Dameware critical hole

2005-08-31 Thread TheGesus
www.dameware.com has been down since yesterday evidently due to hurricane Katrina. whois lists the company as being located in Mandeville, LA, which is across Lake Pontchartrain from New Orleans. Making this a super-ultra-0day! On 8/31/05, [EMAIL PROTECTED] <[EMAIL PROTECTED]> wrote: haven

[Full-disclosure] Re: Call for new mailing lists @ SecurityFocus (X-POST)

2005-08-31 Thread Alfred Huger
Frank, It was acquired in 2002 not 2003. If you can actually point to anything differant other than aesthetics I'd be happy to talk about it and even work to change it if it's got merit. I've been here since the begining - given I started it - and I really see little or any differance pre vr

[Full-disclosure] Re: Call for new mailing lists @ SecurityFocus (X-POST)

2005-08-31 Thread Frank de Wit
todo? quit symantec restart the real securityfocus as it was before 2003 start fulldisclosure... Alfred Huger wrote: All, As most of you know, some of the strongest value the SecurityFocus community has to offer is that of our mailing lists. These lists contribute a vast amount of information

Re: [Full-disclosure] Possible issue for shared computers

2005-08-31 Thread FRLinux
On 8/31/05, n3td3v <[EMAIL PROTECTED]> wrote: > Dear security community, > Security issue discovered using Google and Firefox. > Cookies, who needs them anyway? Thanks, n3td3v Hello, This is nothing new, have a read : http://www.mozilla.org/projects/embedding/shared_profiles.html When you ar

[Full-disclosure] Possible issue for shared computers

2005-08-31 Thread n3td3v
Dear security community, Security issue discovered using Google and Firefox. I logged out of my first Google account. The logged out confirmation page appeared. I then clicked on Sign-In. I signed in on a second Google account, the page appeared which states who you've just logged in as. This is

[Full-disclosure] Dameware critical hole

2005-08-31 Thread ad
haven't notice any warning about this but someone posted that POC  to my forum and is confirming that it works, this is urgent to update your dameware .   / * _ __ * (_)___ /

[Full-disclosure] Re: Fwd: Disk Cleaning Tools

2005-08-31 Thread Dave Korn
Original Message >From: y0himba >Message-Id: [EMAIL PROTECTED] > If you ask me, Eraser is the best way to go. Not to mention it can > automatically erase certain files or directories on a schedule. Oh, and > its FREE. I'd second that. It's an excellent utility, has the flexibility to

RE: Fwd: [Full-disclosure] Disk Cleaning Tools

2005-08-31 Thread y0himba
If you ask me, Eraser is the best way to go. Not to mention it can automatically erase certain files or directories on a schedule. Oh, and its FREE. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Bob the Builder Sent: Wednesday, August 31, 2005 10:37 AM

Re: Fwd: [Full-disclosure] Disk Cleaning Tools

2005-08-31 Thread Morning Wood
http://www.sysinternals.com/Utilities/SDelete.html selectivly deletes files - Original Message - From: "Bob the Builder" <[EMAIL PROTECTED]> To: Sent: Wednesday, August 31, 2005 7:37 AM Subject: Re: Fwd: [Full-disclosure] Disk Cleaning Tools > Hmm, perhaps I should have clarified, I

Re: [Full-disclosure] Disk Cleaning Tools

2005-08-31 Thread Michael Holstein
> I am looking at software for securely erasing information on disks. > Other than stuff like Eraser and Cleanup what other tools have people > found useful/reliable. http://dban.sourceforge.net small linux distro on floppy, will do multiple-pass overwrites (selectable number, default of 3). Go

Re: Fwd: [Full-disclosure] Disk Cleaning Tools

2005-08-31 Thread Exibar
yup, use Dban first to wipe the drive, then re-image it...you do have a clean image to revert back to right? :-) or use VMware and revert back to the snapshot after wiping the drive. Exibar - Original Message - From: "Bob the Builder" <[EMAIL PROTECTED]> To: Sent: Wednesday, August

Re: [Full-disclosure] Disk Cleaning Tools

2005-08-31 Thread Exibar
Dban gets my vote as well. Plus can't beat the price, it's Free :-) Exibar - Original Message - From: "the.soylent" <[EMAIL PROTECTED]> To: "Bob the Builder" <[EMAIL PROTECTED]> Cc: Sent: Wednesday, August 31, 2005 9:48 AM Subject: Re: [Full-disclosure] Disk Cleaning Tools > -B

Re: Fwd: [Full-disclosure] Disk Cleaning Tools

2005-08-31 Thread Bob the Builder
Hmm, perhaps I should have clarified, I was hoping to be able to use the disk and operating systems afterwards, I was looking for a more surgical approach, i.e. deleting specific files, or even better something clever enough to know what registry keys and directories to wipe to save an infinite

[Full-disclosure] [ GLSA 200508-22 ] pam_ldap: Authentication bypass vulnerability

2005-08-31 Thread Sune Kloppenborg Jeppesen
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Gentoo Linux Security Advisory GLSA 200508-22 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - http://security.gentoo.org/ - - - - - -

[Full-disclosure] [ GLSA 200508-21 ] phpWebSite: Arbitrary command execution through XML-RPC and SQL injection

2005-08-31 Thread Sune Kloppenborg Jeppesen
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Gentoo Linux Security Advisory GLSA 200508-21 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - http://security.gentoo.org/ - - - - - -

Re: [Full-disclosure] Disk Cleaning Tools

2005-08-31 Thread the.soylent
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 I prefer "Darik's Boot and Nuke" get it here: http://dban.sourceforge.net/ cheers, soylent Bob the Builder schrieb: > Hi, > I am looking at software for securely erasing information on disks. > Other than stuff like Eraser and Cleanup what othe

Re: [Full-disclosure] Disk Cleaning Tools

2005-08-31 Thread h4cky0u
Bob,   I suggest you try out the Incinerator tool from the latest iolo's System Mechanic Professional. It erases the data on your disk securely and is quite reliable. Even Encase (one of the best forensics tools out there)  couldn't recover data erased by the incinerator. Hope this helps.   Regard

Re: Fwd: [Full-disclosure] Disk Cleaning Tools

2005-08-31 Thread Marek Isalski
Pillar-drill, every time. >>> winsoc <[EMAIL PROTECTED]> 31/08/2005 14:44:23 >>> You could use semtex, this will certainly erase all your pr0n and other nasty habits from your drives. > I am looking at software for securely erasing information on disks. Other > than stuff like Eraser and Cleanup

[Full-disclosure] Re: Tool for Identifying Rogue Linksys Routers

2005-08-31 Thread Gregory Boyce
On Fri, 26 Aug 2005, Dave Hull wrote: If the Linksys devices are DHCP clients themselves, you might be able to use DHCPFingerprint to locate them when they renew their leases. The only problem with this is that the Linksys is serving out IP addresses via DHCP. Linksys routers generally have

Fwd: [Full-disclosure] Disk Cleaning Tools

2005-08-31 Thread winsoc
-- Forwarded message --From: winsoc <[EMAIL PROTECTED]>Date: Aug 31, 2005 3:42 PM Subject: Re: [Full-disclosure] Disk Cleaning ToolsTo: Bob the Builder <[EMAIL PROTECTED]> You could use semtex, this will certainly erase all your pr0n and other nasty habits from your drives.  On 8/3

[Full-disclosure] Disk Cleaning Tools

2005-08-31 Thread Bob the Builder
Hi, I am looking at software for securely erasing information on disks. Other than stuff like Eraser and Cleanup what other tools have people found useful/reliable. Cheers, Bob ___ Full-Disclosure - We believe in it. Charter: http://lists.grok.org

[Full-disclosure] Indiatimes Messenger 6.0 Buffer Overflow (Remote)

2005-08-31 Thread ViPeR
Indiatimes Messenger 6.0 Buffer Overflow (Remote) Vulnerable Program : Indiatimes Messenger v6.0 (Latest) Vendor URL : http://messenger.indiatimes.com/ (Attempt to contact thru http://messenger.indiatimes.com/feedback.htm failed!) Exploit Type : Remote DoS (Remote Compromise may also be possible

[Full-disclosure] [USN-173-4] PCRE vulnerabilities

2005-08-31 Thread Martin Pitt
=== Ubuntu Security Notice USN-173-4August 31, 2005 python2.1, python2.2, python2.3, gnumeric vulnerabilities CAN-2005-2491 === A security issue affects the following Ubuntu

[Full-disclosure] [SECURITY] [DSA 792-1] New pstotext packages fix arbitrary command execution

2005-08-31 Thread Martin Schulze
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 - -- Debian Security Advisory DSA 792-1 [EMAIL PROTECTED] http://www.debian.org/security/ Martin Schulze August 31st, 2005

[Full-disclosure] ELSA Lancom Router Discloses the Administrator Password to Remote Users

2005-08-31 Thread winsoc
It is reported that the default configuration allows a remote user to connect to the router via port 80 with a web browser and obtain the remote access password, which is apparently stored in clear text. The remote user can also change the router's configuration and can remotely upgrade the fi

[Full-disclosure] Re: BNBT EasyTracker Remote Denial of Service Vulnerability

2005-08-31 Thread Sowhat .
To find out BNBT servers, Google: intitle:"bnbt" inurl:":6969" On 8/30/05, Sowhat . <[EMAIL PROTECTED]> wrote: > > > BNBT EasyTracker Remote Denial of Service Vulnerability > > by Sowhat > > Last Update:2005.08.30 > > http://secway.org/advisory/AD20050830.txt > > Vendor: > > http://bnbteas

Re: [Full-disclosure] Re: JA

2005-08-31 Thread Steve Kudlak
Exibar wrote: I don't know about y'all, but if I was admin of a public ISP (or whatever), I wouldn't want to give anyone the idea that I'm smarter than everyone on the list that's just begging to be hacked/defaced/owned/etc exibar - Original Message - From: "Bardus Populus" <[

Re: [Full-disclosure] J. A. Terranson

2005-08-31 Thread Steve Kudlak
Atte Peltomaki wrote: I get it. This is a place where he gets to feel like a big man. A tough guy. Fine. Whatever floats his boat. While I'm not taking a stand in this issue, I would like to point out that there are quite a few people on this list who push their egos by putti