[Full-disclosure] [SECURITY] [DSA 1210-1] New Mozilla Firefox packages fix several vulnerabilities

2006-11-14 Thread Martin Schulze
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 - -- Debian Security Advisory DSA 1210-1[EMAIL PROTECTED] http://www.debian.org/security/ Martin Schulze November 14th, 2006

[Full-disclosure] IronServer.com Bulletproof Web Servers! You wont be shut down!

2006-11-14 Thread William Stanley
Bulletproof Web Servers! You wont be shut down!Call today for more information! 512-853-9790 http://www.ironserver.com/ http://www.ironserver.com/ http://www.ironserver.com/ http://www.ironserver.com/ As you may already know, many web hosting companies have Terms of Service (TOS) or Acceptable Use

[Full-disclosure] Austin Decking 512-385-5334 Austin decking wholesale

2006-11-14 Thread William Stanley
Austin hardwood flooring 512-385-5334 Austin decking Austin LumberAustin hardwood flooring 512-385-5334 Austin deckingAustin lumber 512-385-5334Austin hardwood flooring 512-385-5334Austin decking 512-385-5334Decking and building

Re: [Full-disclosure] DoS kiddiots can face 10 years in jail

2006-11-14 Thread James Greenhalgh
J. Oquendo wrote: [forwarded] The new law also makes it an offence to supply or make available any software or tools that could be used to commit hacking or denial of service attacks, and those found guilty under this section of the act face up to two years in jail. They were doing OK until

[Full-disclosure] txdns 2.0.0: (free) Aggressive multithreaded DNS digger/brute-forcer

2006-11-14 Thread Arley Silveira
Hi, I'm very excited to release TXDNS 2.0.0 (www.txdns.net). This new version features a distributed model which further boosts TXDNS's parallelism and performance. This model allows a TXDNS client to send jobs to a TXDNS server over a clear or encrypted TCP channel.For example, to put a TXDNS

Re: [Full-disclosure] Austin Decking 512-385-5334 Austin decking wholesale

2006-11-14 Thread Alan J. Wylie
On Tue, 14 Nov 2006 00:46:24 -0800 (PST), William Stanley [EMAIL PROTECTED] said: ^^^ http://www.spamhaus.org/rokso/listing.lasso?-op=cnspammer=William%20Stanley%20/%20Ironserver.com Joe Job? much snippage Austin hardwood flooring

Re: [Full-disclosure] Austin Decking 512-385-5334 Austin decking wholesale

2006-11-14 Thread Jeb Osama
hardwood flooringbruce hardwood flooringengineered hardwood flooringdiscount hardwood flooring prefinished hardwood flooringinstalling hardwood flooringhardwood flooring installationoak hardwood flooringinstall hardwood flooringflooring hardwoodof hardwood flooringhow to install hardwood flooring

Re: [Full-disclosure] Keylogger

2006-11-14 Thread Jeb Osama
Yesterday I finished programming a keylogger How nice :) , and have decided to sell itonline for a small price. How very nice :) I have posted here because I believe people wouldbe interested in a hacking tool such as this - keyloggers are the easiest and quickest way to obtain an email

Re: [Full-disclosure] Austin Decking 512-385-5334 Austin decking wholesale

2006-11-14 Thread Nick FitzGerald
Karl Ordnung wrote: Hey Hombre, this is Spam?! Amigo -- you should read along for a while before making such off-topic posts (an yes, Jeb's original response and this one are also off-topic so please don't contnue the thread). Jeb was making a joke _at the spammer's expense_, explaining to

Re: [Full-disclosure] Austin Decking 512-385-5334 Austin decking wholesale

2006-11-14 Thread Karl Ordnung
Hey Hombre, this is Spam?! Jeb Osama schrieb: hardwood flooring bruce hardwood flooring engineered hardwood flooring discount hardwood flooring prefinished hardwood flooring installing hardwood flooring hardwood flooring installation oak hardwood flooring install hardwood flooring

Re: [Full-disclosure] Keylogger

2006-11-14 Thread Ajay Pal Singh Atwal
Gah... What did he say, he finished learning how to program yesterday... - Jeb Osama [EMAIL PROTECTED] wrote: Yesterday I finished programming a keylogger How nice :) , and have decided to sell it online for a small price. How very nice :) I have posted here because I believe

Re: [Full-disclosure] Austin Decking 512-385-5334 Austindecking wholesale

2006-11-14 Thread David Swafford
Golden... NMAP shows the following (lumbermax.com): 21/TCP - OPEN - FTP 22/TCP - OPEN - SSH 25/TCP - OPEN - SMTP 53/TCP - OPEN - DOMAIN 80/TCP - OPEN - HTTP 110/TCP - OPEN - POP3 111/TCP - OPEN - RPCBIND 135/TCP - FILTERED - MSRPC 137/TCP - FILTERED - NETBIOS-NS 138/TCP - FILTERED -

Re: [Full-disclosure] Austin Decking 512-385-5334 Austindecking wholesale

2006-11-14 Thread ragdelaed
From the original header: Received: from [194.24.158.16] by web58409.mail.re3.yahoo.com via HTTP; Tue, 14 Nov 2006 00:46:24 PST Date: Tue, 14 Nov 2006 00:46:24 -0800 (PST) From: William Stanley [EMAIL PROTECTED] To: full-disclosure@lists.grok.org.uk 194.24.158.16 is not lumbermax.com,

[Full-disclosure] Remove Rippoff Reports ED Magedson Remove scam.com complaints.com posts

2006-11-14 Thread William Stanley
Remove Rippoff Reports ED Magedson Remove Rip Off Reports SEO EXPERTS PROTECT YOUR NAME FROM HARMFUL INTERNET POSTINGS! Remove Rippoff Reports ED Magedson Remove Rip Off Reports http://www.RepSavior.com Remove Negative Information in Google and search engines When negative Internet postings

Re: [Full-disclosure] Wireless fun!

2006-11-14 Thread Aaron Gray
Looks like Microsoft have done an update on the Broadcom .SYS driver on the 5th of Novmber. Aaron - Original Message - From: H D Moore [EMAIL PROTECTED] To: full-disclosure@lists.grok.org.uk Sent: Monday, November 13, 2006 6:45 PM Subject: [Full-disclosure] Wireless fun! Shiny new

[Full-disclosure] Advisory 14/2006: Dotdeb PHP Email Header Injection Vulnerability

2006-11-14 Thread Stefan Esser
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Hardened-PHP Project www.hardened-php.net -= Security Advisory =- Advisory: Dotdeb PHP Email Header Injection Vulnerability Release Date: 2006/11/14 Last Modified:

Re: [Full-disclosure] [ GLSA 200611-03 ] NVIDIA binary graphics driver: Privilege escalation vulnerability

2006-11-14 Thread Glynn Clements
Nick Boyce wrote: On 11/7/06, Raphael Marichez [EMAIL PROTECTED] wrote: - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Gentoo Linux Security Advisory GLSA 200611-03 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -

Re: [Full-disclosure] Austin Decking 512-385-5334 Austin decking wholesale

2006-11-14 Thread imipak
Alan J. Wylie wrote: On Tue, 14 Nov 2006 00:46:24 -0800 (PST), William Stanley [EMAIL PROTECTED] said: ^^^ http://www.spamhaus.org/rokso/listing.lasso?-op=cnspammer=William%20Stanley%20/%20Ironserver.com Joe Job? What makes you say

[Full-disclosure] ZDI-06-040: WinZip FileView ActiveX Control Unsafe Method Exposure Vulnerability

2006-11-14 Thread zdi-disclosures
ZDI-06-040: WinZip FileView ActiveX Control Unsafe Method Exposure Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-06-040.html November 14, 2006 -- CVE ID: CVE-2006-5198 -- Affected Vendor: WinZip -- Affected Products: WinZip 10.0 (pre build 7245) -- TippingPoint(TM)

[Full-disclosure] EEYE: Workstation Service NetpManageIPCConnect Buffer Overflow

2006-11-14 Thread eEye Advisories
eEye Research - http://research.eeye.com Workstation Service NetpManageIPCConnect Buffer Overflow Release Date: November 14, 2006 Date Reported: July 25, 2006 Severity: High (Remote Code Execution) Vendor: Microsoft Systems Affected: Windows 2000 (Remote Code Execution) Windows XP SP1 (Local

Re: [Full-disclosure] Austin Decking 512-385-5334 Austindecking wholesale

2006-11-14 Thread Nick FitzGerald
Bardus Populus wrote: snip I would have thought a CEH/CCNA/Network+/Security+ could (or would) have done better. might I'd agree with, or were you trying to make a joke? This was just more evidence of what happens when you put the floor sweepings into a sausage machine... Regards, Nick

[Full-disclosure] [SECURITY] [DSA 1211-1] New pdns packages fix arbitrary code execution

2006-11-14 Thread Moritz Muehlenhoff
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 - -- Debian Security Advisory DSA 1211-1[EMAIL PROTECTED] http://www.debian.org/security/ Moritz Muehlenhoff November 14th, 2006

Re: [Full-disclosure] DoS kiddiots can face 10 years in jail

2006-11-14 Thread Steffen Kluge
On Mon, 2006-11-13 at 13:13 -0500, J. Oquendo wrote: The new law also makes it an offence to supply or make available any software or tools that could be used to commit hacking or denial of service attacks, and those found guilty under this section of the act face up to two years in jail.

Re: [Full-disclosure] Wireless fun!

2006-11-14 Thread Aaron Gray
Looks like Microsoft have done an update on the Broadcom .SYS driver on the 5th of Novmber. Not too sure actually whether it was it could have been running and removing the LinkSys driver that did the update. Can someone verify this ? Aaron - Original Message - From: H D Moore

[Full-disclosure] [ MDKSA-2006:207 ] - Updated bind packages fixes RSA signature verification vulnerability

2006-11-14 Thread security
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 ___ Mandriva Linux Security Advisory MDKSA-2006:207 http://www.mandriva.com/security/

[Full-disclosure] UK Security Convention - Continuity 2006

2006-11-14 Thread Continuity 2006
The 2006 Continuity Security Convention Continuity '06 1st December - 3rd December 2006 Manchester, UK www.continuity.org.uk Continuity is a free security convention open to anyone with an interest in computer security, hacking, phone phreaking, telephony, cryptography, warez, internet

[Full-disclosure] [ MDKSA-2006:208 ] - Updated openldap packages fixes Bind vulnerability

2006-11-14 Thread security
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 ___ Mandriva Linux Security Advisory MDKSA-2006:208 http://www.mandriva.com/security/

[Full-disclosure] ZDI-06-041: Microsoft Internet Explorer CSS Float Property Memory Corruption Vulnerability

2006-11-14 Thread zdi-disclosures
ZDI-06-041: Microsoft Internet Explorer CSS Float Property Memory Corruption Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-06-041.html November 14, 2006 -- CVE ID: CVE-2006-4687 -- Affected Vendor: Microsoft -- Affected Products: Internet Explorer 6 --

Re: [Full-disclosure] ZDI-06-040: WinZip FileView ActiveX Control Unsafe Method Exposure Vulnerability

2006-11-14 Thread Micheal Turner
7245 correctly resolves this issue; standard stack overflow in WZFILEVIEW.FilePattern snatching EIP; PoC below; HTML HEAD TITLE/TITLE /HEAD BODY SCRIPT LANGUAGE=VBScript !-- Sub WZFILEVIEW_OnAfterItemAdd(Item) WZFILEVIEW.FilePattern = SMASHTHESTACKHERE end sub -- /SCRIPT OBJECT

[Full-disclosure] Links smbclient command execution

2006-11-14 Thread Teemu Salmela
Links smbclient command execution - There is a flaw in the Links web browser, that allows malicious web sites to execute smbclient commands on the victim's machine. This flaw makes it possible to read any file from the