[Full-disclosure] IOActive Security Advisory: Buffer overflow in Python zlib extension module

2008-04-10 Thread Justin Ferguson
Title: Buffer overflow in Python zlib extension module Date Discoverd: ??-April-2008 Date Reported: 08-April-2008 Date Patched: 08-April-2008 Date Disclosed: 09-April-2008 Criticality:Critical Affected Products -

Re: [Full-disclosure] n3td3v has a fan

2008-04-10 Thread Micheal Cottingham
Now that's immature. On Thu, Apr 10, 2008 at 1:23 AM, [EMAIL PROTECTED] wrote: O thanks for ur comment !! I'm sure u didn't get the point but u got something in ur mouth that's wat u said. Anyway my advise is u know !!! http://annysoft.wordpress.com On 4/9/08, [EMAIL

Re: [Full-disclosure] n3td3v has a fan

2008-04-10 Thread Valdis . Kletnieks
On Tue, 08 Apr 2008 23:00:09 BST, n3td3v said: On Tue, Apr 8, 2008 at 10:54 PM, Razi Shaban [EMAIL PROTECTED] wrote: You know, by replying to your enemies you're just proving them right. If you just ignore them, you'll embaress them and make them look foolish. So you're admitting you're

Re: [Full-disclosure] n3td3v has a fan

2008-04-10 Thread Valdis . Kletnieks
On Tue, 08 Apr 2008 14:58:34 BST, n3td3v said: Keith has repost http://blog.securitynow.us/2008/04/07/storm-worm-russian-business-network-rbn-repost-from-march-19-2008/ his original entry after finding out i'm not a troll. If Keith read Neal's analysis as saying you were a troll, he totally

[Full-disclosure] [ GLSA 200804-08 ] lighttpd: Multiple vulnerabilities

2008-04-10 Thread Tobias Heinlein
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Gentoo Linux Security Advisory GLSA 200804-08 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - http://security.gentoo.org/ - - - - -

Re: [Full-disclosure] Fwd: n3td3v has a fan

2008-04-10 Thread Valdis . Kletnieks
On Wed, 09 Apr 2008 19:53:44 BST, n3td3v said: It highlights what i've been saying for _years_ about never trusting your employees, and you've got to patch your offline machines as fast as your online ones. Hate to burst your bubble, but insider threats have been understood as an issue since

Re: [Full-disclosure] n3td3v has a fan

2008-04-10 Thread Razi Shaban
I was trying to get you to shut up. I thought you might have the intelligence to realize I was doing that, but I never thought you were dumb enough to take me seriously. -- Razi On 4/9/08, n3td3v [EMAIL PROTECTED] wrote: On Tue, Apr 8, 2008 at 10:54 PM, Razi Shaban [EMAIL PROTECTED] wrote:

Re: [Full-disclosure] Open proxy scanner experience

2008-04-10 Thread Valdis . Kletnieks
On Thu, 10 Apr 2008 07:30:36 MDT, James Lay said: So yesterday a network that I do work for had it's mail server scanned. I reported the scan (snort reported nmap -F scan) to the offending netblock owner, thinking that they had a compromised machine. I was surprised to receive an email this

Re: [Full-disclosure] n3td3v has a fan

2008-04-10 Thread malix
I rest my case, your honor, no more witnesses. I repeat...STFU On Wed, 09 Apr 2008 22:23:32 -0700 [EMAIL PROTECTED] wrote: O thanks for ur comment !! I'm sure u didn't get the point but u got something in ur mouth that's wat u said. Anyway my advise is u know !!!

Re: [Full-disclosure] Fwd: n3td3v has a fan

2008-04-10 Thread n3td3v
On Thu, Apr 10, 2008 at 5:27 PM, [EMAIL PROTECTED] wrote: On Wed, 09 Apr 2008 19:53:44 BST, n3td3v said: It highlights what i've been saying for _years_ about never trusting your employees, and you've got to patch your offline machines as fast as your online ones. Hate to burst your

[Full-disclosure] [ GLSA 200804-10 ] Tomcat: Multiple vulnerabilities

2008-04-10 Thread Pierre-Yves Rofes
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Gentoo Linux Security Advisory GLSA 200804-10 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -

[Full-disclosure] [ GLSA 200804-09 ] am-utils: Insecure temporary file creation

2008-04-10 Thread Pierre-Yves Rofes
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Gentoo Linux Security Advisory GLSA 200804-09 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -

[Full-disclosure] [SECURITY] [DSA 1545-1] New rsync packages fix arbitrary code execution

2008-04-10 Thread Moritz Muehlenhoff
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 - Debian Security Advisory DSA-1545-1 [EMAIL PROTECTED] http://www.debian.org/security/ Moritz Muehlenhoff April 10, 2008

Re: [Full-disclosure] EUSecWest CFP Closes April 14th (conf May 21/22 2008)

2008-04-10 Thread n3td3v
I'm calling for a security conference mailing list to be setup, this is getting beyond a joke now all this unlawful commercial spam. If you want to make money, then go buy ads and page impressions on websites the legitimate way. Please someone setup a security conference and training mailing list

Re: [Full-disclosure] EUSecWest CFP Closes April 14th (conf May 21/22 2008)

2008-04-10 Thread Nate McFeters
n3td3v... The list is unmoderated. That's why we have to get 63 emails for your last pointless rant. Some of us find these conference emails quite useful. Nate On 4/10/08, n3td3v [EMAIL PROTECTED] wrote: I'm calling for a security conference mailing list to be setup, this is getting beyond a

Re: [Full-disclosure] EUSecWest CFP Closes April 14th (conf May 21/22 2008)

2008-04-10 Thread Russ McRee
To which I propose a No more n3td3v mailing list be setup ;-) On Thu, Apr 10, 2008 at 2:55 PM, Nate McFeters [EMAIL PROTECTED] wrote: n3td3v... The list is unmoderated. That's why we have to get 63 emails for your last pointless rant. Some of us find these conference emails quite useful.

Re: [Full-disclosure] EUSecWest CFP Closes April 14th (conf May 21/22 2008)

2008-04-10 Thread DUDE DUDERINO
What laws are they breaking? How hard is it for you to create a filter on your mail account for the same message to be removed? On Thu, Apr 10, 2008 at 5:16 PM, n3td3v [EMAIL PROTECTED] wrote: I'm calling for a security conference mailing list to be setup, this is getting beyond a joke now

Re: [Full-disclosure] EUSecWest CFP Closes April 14th (conf May 21/22 2008)

2008-04-10 Thread n3td3v
On Thu, Apr 10, 2008 at 11:05 PM, DUDE DUDERINO [EMAIL PROTECTED] wrote: What laws are they breaking? I'm not a lawyer, so I can't go into specifics. I'm sure someone on the list will be able to point out that a major security conference with major sponsors like Microsoft have the money to buy

Re: [Full-disclosure] n3td3v has a fan

2008-04-10 Thread Garrett M. Groff
Allow me to posit the following: netdev wants attention, even if its negative attention. I.e., he is intentionally saying things that are inflammatory/unintelligent/provocative so as to arouse a reaction. To say that this is out of stupidity (or that netdev is unintelligent) is a conclusion

Re: [Full-disclosure] EUSecWest CFP Closes April 14th (conf May 21/22 2008)

2008-04-10 Thread n3td3v
On Fri, Apr 11, 2008 at 12:05 AM, Nate McFeters [EMAIL PROTECTED] wrote: So what's your agenda for spamming everyone n3td3v? I'm not a spammer... I have never sent a message to make money... Regards, n3td3v ___ Full-Disclosure - We believe in it.

[Full-disclosure] iDefense Security Advisory 04.09.08: EMC DiskXtender File System Manager Stack Buffer Overflow Vulnerability

2008-04-10 Thread iDefense Labs
iDefense Security Advisory 04.09.08 http://labs.idefense.com/intelligence/vulnerabilities/ Apr 09, 2008 I. BACKGROUND EMC DiskXtender is a data backup and migration suite. It consists of several applications that are used to manage storing large quantities of files across multiple storage

Re: [Full-disclosure] EUSecWest CFP Closes April 14th (conf May21/22 2008)

2008-04-10 Thread josh
Don't have to Sent from my BlackBerry® smartphone with SprintSpeed -Original Message- From: n3td3v [EMAIL PROTECTED] Date: Fri, 11 Apr 2008 00:21:38 To:full-disclosure@lists.grok.org.uk, n3td3v [EMAIL PROTECTED] Subject: Re: [Full-disclosure] EUSecWest CFP Closes April 14th (conf May

Re: [Full-disclosure] EUSecWest CFP Closes April 14th (conf May 21/22 2008)

2008-04-10 Thread Dustin D. Trammell
On Thu, 2008-04-10 at 17:55 -0400, Nate McFeters wrote: n3td3v... The list is unmoderated. That's why we have to get 63 emails for your last pointless rant. Some of us find these conference emails quite useful. FYI, I maintain a calendar for security conference dates, CFP deadlines,

Re: [Full-disclosure] EUSecWest CFP Closes April 14th (conf May21/22 2008)

2008-04-10 Thread n3td3v
On Fri, Apr 11, 2008 at 12:26 AM, josh [EMAIL PROTECTED] wrote: Don't have to Are you going to EUSecWest, work for a sponsor or are some way losing out by me calling for a new mailing list to be setup? All the best, n3td3v ___ Full-Disclosure - We

Re: [Full-disclosure] EUSecWest CFP Closes April 14th (conf May 21/22 2008)

2008-04-10 Thread Razi Shaban
Don't hijack threads. -- Razi On 4/11/08, n3td3v [EMAIL PROTECTED] wrote: I'm calling for a security conference mailing list to be setup, this is getting beyond a joke now all this unlawful commercial spam. If you want to make money, then go buy ads and page impressions on websites the

Re: [Full-disclosure] EUSecWest CFP Closes April 14th (conf May 21/22 2008)

2008-04-10 Thread n3td3v
On Fri, Apr 11, 2008 at 12:52 AM, Razi Shaban [EMAIL PROTECTED] wrote: Don't hijack threads. I'll hijack a thread thats making £1000 per person if I want. ___ Full-Disclosure - We believe in it. Charter:

Re: [Full-disclosure] EUSecWest CFP Closes April 14th (conf May 21/22 2008)

2008-04-10 Thread Razi Shaban
So you're admitting that you hijack threads? -- Razi On 4/11/08, n3td3v [EMAIL PROTECTED] wrote: On Fri, Apr 11, 2008 at 12:52 AM, Razi Shaban [EMAIL PROTECTED] wrote: Don't hijack threads. I'll hijack a thread thats making £1000 per person if I want.

Re: [Full-disclosure] EUSecWest CFP Closes April 14th (conf May21/22 2008)

2008-04-10 Thread Ureleet
hey netdev, dude if you want a list for conferences, why dont you set one up? you obviously know how, through google groups, as you have one... then advertise to all the lists, that you made a list, then we'll worry about it there.? On Thu, Apr 10, 2008 at 7:26 PM, josh [EMAIL PROTECTED] wrote:

Re: [Full-disclosure] EUSecWest CFP Closes April 14th (conf May21/22 2008)

2008-04-10 Thread n3td3v
On Fri, Apr 11, 2008 at 1:30 AM, Ureleet [EMAIL PROTECTED] wrote: hey netdev, dude if you want a list for conferences, why dont you set one up? you obviously know how, through google groups, as you have one... then advertise to all the lists, that you made a list, then we'll worry about it

Re: [Full-disclosure] EUSecWest CFP Closes April 14th (conf May21/22 2008)

2008-04-10 Thread Ureleet
i'm just saying, if you arent willing to do the work, then dont ask others to do it for you. if you want something done right, do it yourself. On Thu, Apr 10, 2008 at 8:43 PM, n3td3v [EMAIL PROTECTED] wrote: On Fri, Apr 11, 2008 at 1:30 AM, Ureleet [EMAIL PROTECTED] wrote: hey netdev,

[Full-disclosure] Perl Underground speaks

2008-04-10 Thread auto263090
This is Perl Underground here. We thought we could respond to a couple kids, cause there ain't nothin' like dissin' on FD. Part of this rant is just in general, and might end up in Perl Underground 6. So it's to be considered BETA, and thus criticism is UNACCEPTABLE!!! Just kidding. RSnake

Re: [Full-disclosure] EUSecWest CFP Closes April 14th (conf May21/22 2008)

2008-04-10 Thread Nate McFeters
You know n3td3v, conferences are a lot of fun to go to. I've sat by on FD and watched you hijack numerous threads, blast out emails that lead to ridiculous amounts of wated time and resources, and I've never once said anything against you. Why? FD is and always has been an unmoderated list.

Re: [Full-disclosure] Perl Underground speaks

2008-04-10 Thread Nate McFeters
Hey Perl Underground, Maybe I missed something, could you provide some context around your gripe against RSnake? I'm struggling a bit with it, and your email is quite long and heavily line broken, making it hard to read. I've found RSnake to be pretty knowledgeable when it comes to web

[Full-disclosure] [SECURITY] [DSA 1546-1] New gnumeric packages fix arbitrary code execution

2008-04-10 Thread Devin Carraway
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 - Debian Security Advisory DSA-1546-1 [EMAIL PROTECTED] http://www.debian.org/security/ Devin Carraway April 10, 2008

Re: [Full-disclosure] EUSecWest CFP Closes April 14th (conf May21/22 2008)

2008-04-10 Thread n3td3v
On Fri, Apr 11, 2008 at 3:57 AM, Nate McFeters [EMAIL PROTECTED] wrote: so do the vulnerability research companies like Tipping Point's ZDI and iDefense. Would you contest that they shouldn't post here either? I have no problems with big companies who spam who are disclosing a vulnerability

Re: [Full-disclosure] Fwd: n3td3v has a fan

2008-04-10 Thread steve menard
you don't see Bruce posting 5 times a day here n3td3v wrote: On Thu, Apr 10, 2008 at 5:27 PM, [EMAIL PROTECTED] wrote: On Wed, 09 Apr 2008 19:53:44 BST, n3td3v said: It highlights what i've been saying for _years_ about never trusting your employees, and you've got to patch your

Re: [Full-disclosure] EUSecWest CFP Closes April 14th (conf May21/22 2008)

2008-04-10 Thread scott
That's pretty funny. I used to get a kick out of your BS but, I must say, you are getting very monotonous with your over inflated self-worth. You have admitted that all you do is scrape other sites and post their knowledge to your agenda group. Basically, you're saying you are a journalist