[Full-disclosure] VMSA-2010-0010 ESX 3.5 third party update for Service Console kernel

2010-06-24 Thread VMware Security team
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 - VMware Security Advisory Advisory ID: VMSA-2010-0010 Synopsis: ESX 3.5 third party update for Service Console kernel Issue date:2010-0

Re: [Full-disclosure] No anti-virus software? No internet connection

2010-06-24 Thread Vulnski LaRock
Ok, so let them make it mandatory. Everyone will just run Fake AV. Business as usual. ___ Full-Disclosure - We believe in it. Charter: http://lists.grok.org.uk/full-disclosure-charter.html Hosted and sponsored by Secunia - http://secunia.com/

Re: [Full-disclosure] Congratulations Andrew

2010-06-24 Thread Escher Auernheimer
Rejoice in a righteous man's persecution at your peril. On Thu, Jun 24, 2010 at 2:54 PM, T Biehn wrote: > Ouch dude: > http://www.cbc.ca/canada/toronto/story/2010/06/23/tor-g20-arrest.html > > Guess you ate a dick too. > > On Wed, Jun 16, 2010 at 7:05 PM, Byron Sonne wrote: > >> > Looks like An

[Full-disclosure] [TOOL] The 'Snort like' Sagan way of deal with system logs.

2010-06-24 Thread Champ Clark III [Softwink]
Sagan release version 0.1.0 http://sagan.softwink.com Written by Champ Clark (AKA 'Da Beave') and the Softwink, Inc team Date: 06/24/2010 Softwink announces the release of Sagan, the ultimate in Syslog monitoring. Sagan can alert you when events are occurring in your syslogs that need your atten

Re: [Full-disclosure] Congratulations Andrew

2010-06-24 Thread Cody Robertson
On 6/24/10 3:54 PM, T Biehn wrote: > Ouch dude: > http://www.cbc.ca/canada/toronto/story/2010/06/23/tor-g20-arrest.html > > Guess you ate a dick too. > > On Wed, Jun 16, 2010 at 7:05 PM, Byron Sonne wrote: > >>> Looks like Andrew/weev/n3td3v finally gets to do what he likes the most >>> Perform

Re: [Full-disclosure] Congratulations Andrew

2010-06-24 Thread T Biehn
Ouch dude: http://www.cbc.ca/canada/toronto/story/2010/06/23/tor-g20-arrest.html Guess you ate a dick too. On Wed, Jun 16, 2010 at 7:05 PM, Byron Sonne wrote: > > Looks like Andrew/weev/n3td3v finally gets to do what he likes the most > > Performing fellatio on his fellow inmates > > http://www

[Full-disclosure] Vulnerabilities in Cimy Counter for WordPress

2010-06-24 Thread MustLive
Hello Full-Disclosure! I want to warn you about security vulnerabilities in plugin Cimy Counter for WordPress. - Advisory: Vulnerabilities in Cimy Counter for WordPress - URL: http://websecurity.com.ua/4170/ - Aff

Re: [Full-disclosure] Andrew???

2010-06-24 Thread huj huj huj
hey man chill he might look like a cracksmoking streetbum but he has millions in hus panamanian accounts! the paypal donation thing is just a front! 2010/6/23 Jubei Trippataka > But if you look like this you deserve it: > > http://pics.livejournal.com/weev/pic/00090a2r/s640x480 > > Funny cuz it'

[Full-disclosure] [PainSec 2010-001]: ActiveCollab 2.3.0 Directory Traversal / Local File Inclusion

2010-06-24 Thread Dade
PAINSEC SECURITY RESEARCH GROUP SECURITY ADVISORY 2010-001 - Original release date: June 24th, 2010 - Discovered by: Jose Carlos de Arriba (dade (at) painsec (dot) com) - Severity: 10/10 (Base CVSS Score) =

Re: [Full-disclosure] Microsoft Help Files (.CHM): 'Locked File' Feature Bypass

2010-06-24 Thread Meadow
Thor - Zealand is where your wife was born. On Jun 23, 2010, at 1:25 PM, "Thor (Hammer of God)" mailto:t...@hammerofgod.com>> wrote: I know better than to bring up the “Australia” vs “New Zealand” bit. Speaking of which, was there an “Old Zealand?” ;) t

[Full-disclosure] Apache Axis Session Fixation Vulnerability

2010-06-24 Thread Tiago Ferreira Barbosa
=[ Tempest Security Intelligence - Advisory #02 / 2010 ]=== Vulnerability => [ 'Apache Axis Session Fixation Vulnerability' ] Authors=> ['Tiago Ferreira ' 'Leandro Oliveira ' ] [ Table of Contents ]===

Re: [Full-disclosure] Microsoft Help Files (.CHM): 'Locked File' Feature Bypass

2010-06-24 Thread Paul Craig
Hey Thor, everything is well mate. Firstly I think you may have missed the context of this bug, which was not apparent from my first post. I spend a lot of time working on the security of internet Kiosks, Citrix terminals and other thin-clients. In these situations, users are often blocked from

[Full-disclosure] Apache Axis Session Fixation Vulnerability

2010-06-24 Thread Tiago Ferreira Barbosa
=[ Tempest Security Intelligence - Advisory #02 / 2010 ]=== Vulnerability => [ 'Apache Axis Session Fixation Vulnerability' ] Authors=> ['Tiago Ferreira ' 'Leandro Oliveira ' ] [ Table of Contents ]===

[Full-disclosure] CYBSEC Advisory#2010-0606 InterScan Web Security 5.0 Arbitrary File Download

2010-06-24 Thread Cybsec - Security Systems
Advisory Name: Arbitrary File Download in InterScan Web Security Virtual Appliance 5.0 Internal Cybsec Advisory Id: 2010-0606 Vulnerability Class: Arbitrary File Download Release Date: To be confirmed Affected Applications: Confirmed in InterScan Web Security Virtual Appliance 5.0

[Full-disclosure] CYBSEC Advisory#2010-0605 InterScan Web Security 5.0 Arbitrary File Upload

2010-06-24 Thread Cybsec - Security Systems
Advisory Name: Arbitrary File Upload in InterScan Web Security Virtual Appliance 5.0. Internal Cybsec Advisory Id: 2010-0605 Vulnerability Class: Arbitrary File Upload Release Date: 22-06-2010 Affected Applications: Confirmed in InterScan Web Security Virtual Appliance 5.0. Other

[Full-disclosure] CYBSEC Advisory#2010-0604 InterScan Web Security 5.0 Local Privilege Escalation

2010-06-24 Thread Cybsec - Security Systems
Advisory Name: Local Privilege Escalation in InterScan Web Security Virtual Apliance 5.0 Internal Cybsec Advisory Id: 2010-0604 Vulnerability Class: Local Privilege Escalation Release Date: 22-06-2010 Affected Applications: InterScan Web Security Virtual Aplliance 5.0. Other versi

[Full-disclosure] NULL + H4CK3R Meet in Delhi on 26th june 2010

2010-06-24 Thread Rockey Killer
Hello, As You all must be aware of this meet, but we haven't sent Meets Agenda and timing , So here we go 1) 'Windows Registry Tricks n its Bugs' by Gaurav arora (Security Enthusiast) 2) 'Access List' by Anuj Tyagi (CCNA, Security Researcher) 3) 'Is it time to hack fridge' by Alok Sinha (Se

Re: [Full-disclosure] No anti-virus software? No internet connection

2010-06-24 Thread lsi
On 23 Jun 2010 at 19:23, Jan Schejbal wrote: > It would be interesting to compare the damage actually avoided by virus > scanners to the damages and costs they cause (including false-positives > wiping out system files, the hassle with updates/deployment and the cost > of the products). The mathe

Re: [Full-disclosure] No anti-virus software? No internet connection

2010-06-24 Thread T Biehn
I wonder if someone writes down all that pseudo-intellectual philosophical bullshit that is so carefully crafted by FD members (myself included)? Maybe I should: ??? Profit -Travis On Thu, Jun 24, 2010 at 5:45 AM, Walter van Holst < walter.van.ho...@xs4all.nl> wrote: > On Thu, June 24, 2010 11:0

Re: [Full-disclosure] No anti-virus software? No internet connection

2010-06-24 Thread Walter van Holst
On Thu, June 24, 2010 11:08, valdis.kletni...@vt.edu wrote: >> The answer to that kind of question is quite often related to the >> industry average. For example no more failures than one standard >> deviation below the industry average. > > Ahh.. but that doesn't really help either. Consider tha

Re: [Full-disclosure] No anti-virus software? No internet connection

2010-06-24 Thread Valdis . Kletnieks
On Thu, 24 Jun 2010 09:47:01 +0200, Walter van Holst said: > The answer to that kind of question is quite often related to the > industry average. For example no more failures than one standard > deviation below the industry average. Ahh.. but that doesn't really help either. Consider that not a

Re: [Full-disclosure] No anti-virus software? No internet connection

2010-06-24 Thread Walter van Holst
On Thu, June 24, 2010 09:42, Cor Rosielle wrote: > ...snip... >> The product that fail miserably, throughout the year(s?) should be >> declared "unfit for purpose" ...like an expired food which is >> harmful for health. > > Basically it is an interesting thought. I see a challenge though. Is 3

Re: [Full-disclosure] No anti-virus software? No internet connection

2010-06-24 Thread Cor Rosielle
I recognize that. You'll learn fast to turn off your anti virus software when you want to use cain, netcat and a lot more. The anti virus software doesn't only "protect" you against attacks, but it also prevent you to "attack" others. Cor > -Original Message- > From: full-disclosure-boun.

Re: [Full-disclosure] No anti-virus software? No internet connection

2010-06-24 Thread Cor Rosielle
...snip... > The product that fail miserably, throughout the year(s?) should be > declared "unfit for purpose" ...like an expired food which is > harmful for health. Basically it is an interesting thought. I see a challenge though. Is 3 failures per year miserable? Or should we raise the limit