Re: [Full-disclosure] Month of Random Hashes: DAY FOUR

2007-06-15 Thread Sebastian Krahmer
On Thu, 14 Jun 2007, Month of Random Hashes wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 [ITEM #1] md5: c6cab3a9af2ec1d281a6bf46ff61b3a8 sha1: eb4fdace21518071d68a72d37b395a609305b42f sha256: b11cb917eac32ac0c1f7d733eee8513e47e9681cbef25e2625f4a410b11d This one is old

Re: [Full-disclosure] Paper: Secure file upload in PHP web applications

2007-06-15 Thread Nikolay Kichukov
Very nice presentation. Thanks a lot for sharing with us. Regards, -Nikolay Kichukov Alla Bezroutchko wrote: Various web applications, such as blogs, forums and photo galleries allow users to upload files. Providing file upload function without opening security holes proved to be quite a

[Full-disclosure] Fwd: Month of Random Hashes: DAY THREE

2007-06-15 Thread rashid mohammed
please stop send emails for me.thank you - Got a little couch potato? Check out fun summer activities for kids.---BeginMessage--- -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 [ITEM #1] md5: 53da840b93b8a209fe273c0a6011a53b sha1:

[Full-disclosure] stop emails

2007-06-15 Thread rashid mohammed
please stop send emails for me.thank you - Park yourself in front of a world of choices in alternative vehicles. Visit the Yahoo! Auto Green Center.---BeginMessage--- -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 [ITEM #1] md5:

[Full-disclosure] rPSA-2007-0124-1 kernel xen

2007-06-15 Thread rPath Update Announcements
rPath Security Advisory: 2007-0124-1 Published: 2007-06-14 Products: rPath Linux 1 Rating: Major Exposure Level Classification: Remote Deterministic Denial of Service Updated Versions: kernel=/[EMAIL PROTECTED]:devel//1-xen/2.6.16.33-0.1-1 xen=/[EMAIL PROTECTED]:devel//1/3.0.3_0-1.5-1

[Full-disclosure] Kaspersky Multiple insufficient argument validation of hooked SSDT function Vulnerability

2007-06-15 Thread Matousec - Transparent security Research
Hello, We would like to inform you about a vulnerability in Kaspersky Internet Security 6. Description: Kaspersky Internet Security hooks many functions in SSDT and in at least nine cases it fails to validate arguments that come from the user mode. User calls to NtCreateKey,

[Full-disclosure] [Tool] sqlmap: a blind SQL injection tool (release 0.4)

2007-06-15 Thread Bernardo Damele
Hi, I am glad to release sqlmap 0.4; sqlmap is an automatic blind SQL injection tool, developed in python, capable to perform an active database management system fingerprint, enumerate entire remote databases and much more. The aim of this project is to implement a fully functional database

Re: [Full-disclosure] Month of Random Hashes: DAY THREE

2007-06-15 Thread Tõnu Samuel
On Wed, 2007-06-13 at 23:16 -0700, Brian Dessent wrote: Hashing is not encryption, so flush the notion of decrypt a hash from By definition hashing stuff is also encryption. Not reversible but as art it is can be categorized under encryption :) But seeing as this is FD and there has been a

[Full-disclosure] rPSA-2007-0123-1 squirrelmail

2007-06-15 Thread rPath Update Announcements
rPath Security Advisory: 2007-0123-1 Published: 2007-06-14 Products: rPath Linux 1 Rating: Minor Exposure Level Classification: Indirect User Deterministic Weakness Updated Versions: squirrelmail=/[EMAIL PROTECTED]:devel//1/1.4.10a-0.1-1 References:

[Full-disclosure] rPSA-2007-0122-1 evolution-data-server

2007-06-15 Thread rPath Update Announcements
rPath Security Advisory: 2007-0122-1 Published: 2007-06-14 Products: rPath Linux 1 Rating: Major Exposure Level Classification: Indirect User Deterministic Unauthorized Access Updated Versions: evolution-data-server=/[EMAIL PROTECTED]:devel//1/1.4.1.1-1.4-1 References:

Re: [Full-disclosure] Month of Random Hashes: DAY FOUR

2007-06-15 Thread Month of Random Hashes
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Correct, that hash was created from adore_v0.1.tar.bz2.gpg. Due to popular demand, the MONTH OF RANDOM HASHES FAQ is being written. Hashes of this document will be fully disclosed upon completion. On Fri, 15 Jun 2007 03:33:32 -0400 Sebastian

[Full-disclosure] Month of Random Hashes: DAY SIX

2007-06-15 Thread Month of Random Hashes
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 [ITEM #1] md5: f16ffb7b6bbab541903192675248564a sha1: c38dec8c8025f057bc8c720d090f3f74c2eb2e72 sha256: 9ff6b1012738004ea3496d3921dd8ca618d31646a98285b4836c7f832d31efc0 [ITEM #2] md5: e34656e997ec8ed4a14cde6fd508f72b sha1:

Re: [Full-disclosure] Month of Random Hashes: DAY THREE

2007-06-15 Thread Month of Random Hashes
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Correct. On Fri, 15 Jun 2007 05:32:59 -0400 Tõnu Samuel [EMAIL PROTECTED] wrote: On Wed, 2007-06-13 at 23:16 -0700, Brian Dessent wrote: Hashing is not encryption, so flush the notion of decrypt a hash from By definition hashing stuff is also

[Full-disclosure] List Charter

2007-06-15 Thread Month of Random Hashes
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 [Full-Disclosure] Mailing List Charter John Cartwright [EMAIL PROTECTED] Introduction Purpose This document serves as a charter for the [Full-Disclosure] mailing list hosted at lists.grok.org.uk. The list was created on 9th July 2002 by Len Rose,

Re: [Full-disclosure] stop emails

2007-06-15 Thread Month of Random Hashes
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Here ya go, pal! On Fri, 15 Jun 2007 04:11:52 -0400 rashid mohammed [EMAIL PROTECTED] wrote: please stop send emails for me.thank you - Park yourself in front of a world of choices in

Re: [Full-disclosure] Fwd: Month of Random Hashes: DAY THREE

2007-06-15 Thread Month of Random Hashes
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On Fri, 15 Jun 2007 04:10:42 -0400 rashid mohammed [EMAIL PROTECTED] wrote: please stop send emails for me.thank you - Got a little couch potato? Check out fun summer activities for kids.

Re: [Full-disclosure] Random Hashes

2007-06-15 Thread Month of Random Hashes
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Correct. FAQ coming soon. On Fri, 15 Jun 2007 09:10:56 -0400 Simon B [EMAIL PROTECTED] wrote: Sweetie, Are you feeling OK? Having an episode? S. Message sent using Telaen Webmail

Re: [Full-disclosure] Apple Safari: urlbar/window title spoofing

2007-06-15 Thread Mark Senior
Tested on OS X; Safari 2.0.4, OmniWeb 5.5.4, and Camino 1.0.3 all have different behaviours, but none is vulnerable. Cheers Mark On 6/14/07, Robert Swiecki wrote: There is a vulnerability in Apple Safari... Here's another one. With a specially crafted web page, an attacker can fill the

[Full-disclosure] Breakpoint Security Conference - Monterrey, N.L. Mexico

2007-06-15 Thread Erika Mendoza
It is our pleasure to introduce everyone to Breakpoint Security's first event held in Downtown Monterrey, Nuevo Leon, Mexico aka (Barrio Antiguo). The Call for Papers opens today Friday June 15, 2007. A few private invites have already been accepted please tune to the website for speaker/topic

[Full-disclosure] [ GLSA 200706-05 ] ClamAV: Multiple Denials of Service

2007-06-15 Thread Raphael Marichez
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Gentoo Linux Security Advisory GLSA 200706-05 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - http://security.gentoo.org/ - - - - -

[Full-disclosure] rPSA-2007-0126-1 util-linux

2007-06-15 Thread rPath Update Announcements
rPath Security Advisory: 2007-0126-1 Published: 2007-06-15 Products: rPath Linux 1 Rating: Minor Exposure Level Classification: Local User Deterministic Weakness Updated Versions: util-linux=/[EMAIL PROTECTED]:devel//1/2.12r-1.3-1 References:

Re: [Full-disclosure] SECNICHE : Dwelling Security is On the Run

2007-06-15 Thread Michal Zalewski
On Tue, 12 Jun 2007 [EMAIL PROTECTED] wrote: In an admittedly brief review of this page, I saw nothing useful or informative to my career in information assurance. Aditya has a history of using security mailing lists to advertise his various security consulting projects (metaeye.org, etc)

Re: [Full-disclosure] Month of Random Hashes: DAY THREE

2007-06-15 Thread Month of Random Hashes
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Try reading this part in your web browser - http://lists.grok.org.uk/full-disclosure-charter.html Thanks On Fri, 15 Jun 2007 14:52:44 -0400 Tõnu Samuel [EMAIL PROTECTED] wrote: On Fri, 2007-06-15 at 09:28 -0400, Month of Random Hashes wrote:

Re: [Full-disclosure] Month of Random Hashes: DAY THREE

2007-06-15 Thread M . B . Jr .
damn man, you complicate it so much. right now, Deepan is more confused than before. like, Hey Deepan, in order to kill that mosquito we have this missile and... Math is simple, and so must be the explanations surrounding it. the thing is, many different strings can result in the same, say md5

Re: [Full-disclosure] Month of Random Hashes: DAY THREE

2007-06-15 Thread Brian Dessent
M.B.Jr. wrote: but only one string can produce that md5 hash signature, that sha1 hash signature, fucking that sha256 hash signature, fucking that any_other hash signature, etc... False. If you specify multiple hash algorithms for a string it's conceptually equivalent to making up a new hash

[Full-disclosure] PhpListPro Persistent XSS Vulnerability

2007-06-15 Thread corrado.liotta
-=[ADVISORY---]=- phpListPro Author: CorryL [EMAIL PROTECTED] -=[---]=- -=[+] Application: phpListPro -=[+] Version: 2.0.1 -=[+] Vendor's URL: http://www.smartisoft.com/ -=[+] Platform: Windows\Linux\Unix

[Full-disclosure] [ MDKSA-2007:126 ] - Updated Firefox packages fix multiple vulnerabilities

2007-06-15 Thread security
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 ___ Mandriva Linux Security Advisory MDKSA-2007:126 http://www.mandriva.com/security/

Re: [Full-disclosure] Month of Random Hashes: DAY THREE

2007-06-15 Thread Jason Miller
I still think this is useless. What am I going to do with hashes? This whole Month of * BS is making me want to unsubscribe from the listing. On 6/15/07, [EMAIL PROTECTED] [EMAIL PROTECTED] wrote: On Fri, 15 Jun 2007 16:59:01 -0300, M.B.Jr. said: but only one string can produce that md5 hash

Re: [Full-disclosure] Month of Random Hashes: DAY THREE

2007-06-15 Thread Month of Random Hashes
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Mayhem, Your loss to Frank Trigg was a horrible embarrassment. You are further embarrassing yourself by offering criticism on something you clearly do not understand. Please be patient, full-disclosure is not a place for flames. If you are

Re: [Full-disclosure] SECNICHE : Dwelling Security is On the Run

2007-06-15 Thread Aditya K Sood
Michal Zalewski wrote: On Tue, 12 Jun 2007 [EMAIL PROTECTED] wrote: In an admittedly brief review of this page, I saw nothing useful or informative to my career in information assurance. Aditya has a history of using security mailing lists to advertise his various security