Mailing List Archive For incidents@securityfocus.com May 2003 By Subject

• [ANNOUNCE] protocol watcher
  • Andrew Simmons (Tue May 27 2003 - 08:04:13 EDT)
  • Jerry Shenk (Fri May 23 2003 - 14:50:31 EDT)
  • Anders Reed Mohn (Fri May 23 2003 - 05:06:00 EDT)
  • Justin Pryzby (Thu May 22 2003 - 15:23:30 EDT)
  • Jerry Shenk (Thu May 22 2003 - 15:10:24 EDT)
  • Justin Pryzby (Wed May 21 2003 - 17:00:21 EDT)
• [csl@sublevel3.org: Attack attempts from 195.86.128.45]
  • Christian Stigen Larsen (Thu May 08 2003 - 06:46:57 EDT)
  • Wirehub! Internet Abuse Handling Dept. (Wed May 07 2003 - 12:47:25 EDT)
• [Full-Disclosure] Hotmail & Passport (.NET Accounts) Vulnerability (fwd)
  • Christopher X. Candreva (Thu May 08 2003 - 01:10:17 EDT)
  • Dan Hanson (Thu May 08 2003 - 00:40:57 EDT)
• A lot of whisker attempts?
  • Chris Mann (Fri May 09 2003 - 08:39:23 EDT)
• A question for the list...
  • morning_wood (Fri May 30 2003 - 21:55:46 EDT)
  • Russell Harding (Fri May 30 2003 - 11:44:05 EDT)
  • Russell Harding (Thu May 29 2003 - 12:22:20 EDT)
  • Jonathan A. Zdziarski (Thu May 29 2003 - 10:19:57 EDT)
  • Rob Shein (Thu May 29 2003 - 11:06:38 EDT)
  • Jeff (Thu May 29 2003 - 09:48:51 EDT)
  • ktabic (Thu May 29 2003 - 05:31:00 EDT)
  • Jonathan A. Zdziarski (Tue May 27 2003 - 20:54:02 EDT)
  • Ray Stirbei (Mon May 26 2003 - 23:12:35 EDT)
  • Bojan Zdrnja (Sat May 24 2003 - 20:34:05 EDT)
  • Chip Mefford (Fri May 23 2003 - 15:48:12 EDT)
  • Valdis.Kletnieks(at)vt.edu (Fri May 23 2003 - 13:50:07 EDT)
  • Jimi Thompson (Thu May 22 2003 - 18:39:12 EDT)
  • Stephen P. Berry (Thu May 22 2003 - 17:18:16 EDT)
  • Kevin Reardon (Thu May 22 2003 - 19:58:37 EDT)
  • Jimi Thompson (Thu May 22 2003 - 19:00:35 EDT)
  • Gary Flynn (Thu May 22 2003 - 16:30:52 EDT)
  • Kevin Reardon (Thu May 22 2003 - 15:21:57 EDT)
  • King, Brian (Wed May 21 2003 - 12:47:47 EDT)
  • Brian Finn (Thu May 22 2003 - 14:56:55 EDT)
  • Dave Booth (Thu May 22 2003 - 13:21:23 EDT)
  • Steve Barnet (Wed May 21 2003 - 17:53:05 EDT)
  • Kevin Reardon (Wed May 21 2003 - 13:25:49 EDT)
  • Rob Shein (Wed May 21 2003 - 13:02:58 EDT)
  • Keith W. McCammon (Wed May 21 2003 - 13:00:31 EDT)
  • Kevin Reardon (Tue May 20 2003 - 16:15:03 EDT)
  • Benjamin Tomhave (Tue May 20 2003 - 21:46:47 EDT)
  • Luc Pardon (Wed May 21 2003 - 05:42:06 EDT)
  • Ray Stirbei (Wed May 21 2003 - 02:04:04 EDT)
  • Gary Flynn (Tue May 20 2003 - 17:55:07 EDT)
  • Chip Mefford (Tue May 20 2003 - 17:23:44 EDT)
  • Mark Ng (Tue May 20 2003 - 15:56:15 EDT)
  • Dave Sharp (Sun May 18 2003 - 14:56:23 EDT)
  • Steven (Sun May 18 2003 - 13:29:33 EDT)
  • John McCracken (Mon May 19 2003 - 18:37:49 EDT)
  • Anders Reed Mohn (Tue May 20 2003 - 07:58:36 EDT)
  • Andy Shelley (Mon May 19 2003 - 15:12:51 EDT)
  • Kevin Reardon (Mon May 19 2003 - 14:14:25 EDT)
  • Rob Shein (Sun May 18 2003 - 19:33:48 EDT)
  • Ray Stirbei (Sun May 18 2003 - 14:28:19 EDT)
  • De Velopment (Sun May 18 2003 - 01:07:47 EDT)
  • Dan Perez (Sat May 17 2003 - 20:11:15 EDT)
  • Ed Shirey (Sat May 17 2003 - 19:30:22 EDT)
  • John McCracken (Sat May 17 2003 - 19:27:35 EDT)
  • Ray Stirbei (Sat May 17 2003 - 13:08:37 EDT)
  • Dan Hanson (Sat May 17 2003 - 00:27:44 EDT)
• Attack attempts from 195.86.128.45
  • Fred van Engen (Tue May 13 2003 - 17:34:52 EDT)
  • Rune Kristian Viken (Tue May 13 2003 - 04:12:53 EDT)
  • Levinson, Karl (Thu May 08 2003 - 09:02:35 EDT)
  • Valdis.Kletnieks(at)vt.edu (Thu May 08 2003 - 09:55:01 EDT)
  • Benjamin Krueger (Thu May 08 2003 - 02:16:12 EDT)
  • Levinson, Karl (Wed May 07 2003 - 11:58:04 EDT)
  • abuse(at)abuse.wirehub.net (Wed May 07 2003 - 13:05:31 EDT)
  • Jacco Tunnissen (Wed May 07 2003 - 12:25:13 EDT)
  • Neil Dickey (Wed May 07 2003 - 11:14:12 EDT)
  • NESTING, DAVID M (SBCSI) (Wed May 07 2003 - 11:13:07 EDT)
  • C.W.L. Hoogenboezem (Wed May 07 2003 - 06:17:43 EDT)
  • KoRe MeLtDoWn (Tue May 06 2003 - 23:44:54 EDT)
  • Christian Stigen Larsen (Tue May 06 2003 - 13:36:34 EDT)
• BIND Crash
  • Gaby Vanhegan (Fri May 16 2003 - 04:34:43 EDT)
  • Gaby Vanhegan (Fri May 16 2003 - 04:24:09 EDT)
  • Dimitry (Fri May 16 2003 - 03:52:01 EDT)
  • Mark Ng (Thu May 15 2003 - 20:47:34 EDT)
  • Lee Evans (Thu May 15 2003 - 19:49:58 EDT)
  • Chris Phillips (Thu May 15 2003 - 20:44:25 EDT)
  • Mark Ng (Thu May 15 2003 - 17:44:15 EDT)
  • Gaby Vanhegan (Thu May 15 2003 - 04:05:27 EDT)
• cisco 7200 performance issue
  • Luciano Z (Fri May 23 2003 - 15:42:14 EDT)
  • Gary Flynn (Thu May 22 2003 - 16:49:25 EDT)
  • Wendy Garvin (Fri May 23 2003 - 04:30:51 EDT)
  • Glenn Forbes Fleming Larratt (Thu May 22 2003 - 16:31:37 EDT)
  • Luciano Z (Wed May 21 2003 - 15:45:22 EDT)
• DDoS Attack
  • David Gillett (Thu May 29 2003 - 11:12:29 EDT)
  • Justin Pryzby (Wed May 28 2003 - 13:16:55 EDT)
  • Justin Pryzby (Fri May 23 2003 - 14:12:22 EDT)
  • Andrew Anderson (Fri May 23 2003 - 12:12:08 EDT)
  • Justin Pryzby (Thu May 22 2003 - 15:27:59 EDT)
  • Angelz (Thu May 22 2003 - 19:12:10 EDT)
  • Tim Greer (Thu May 22 2003 - 16:05:01 EDT)
  • Jonathan A. Zdziarski (Thu May 22 2003 - 17:59:54 EDT)
  • Whiteside, Larry [contractor] (Thu May 22 2003 - 15:49:39 EDT)
  • lists(at)khimich.com (Thu May 22 2003 - 15:50:45 EDT)
  • Sebastian Jaenicke (Thu May 22 2003 - 15:22:06 EDT)
  • Steven Shepherd (Thu May 22 2003 - 13:13:27 EDT)
• DNS Injection Problem
  • Stephen P. Berry (Tue May 06 2003 - 17:39:54 EDT)
  • Blade Runner (Tue May 06 2003 - 09:48:50 EDT)
  • Þórhallur Hálfdánarson (Tue May 06 2003 - 09:05:24 EDT)
  • Blade Runner (Tue May 06 2003 - 09:56:44 EDT)
  • Chip Mefford (Tue May 06 2003 - 05:53:38 EDT)
  • Glenn Forbes Fleming Larratt (Mon May 05 2003 - 22:35:25 EDT)
  • Benjamin A. Okopnik (Mon May 05 2003 - 21:07:26 EDT)
  • David Conrad (Mon May 05 2003 - 20:22:49 EDT)
  • Danny (Mon May 05 2003 - 20:30:44 EDT)
  • Blade Runner (Mon May 05 2003 - 13:11:06 EDT)
• DNS poisoning to Korean address
  • meowbaby (Wed May 14 2003 - 23:35:58 EDT)
  • Mike O'Shaughnessy (Wed May 14 2003 - 07:36:03 EDT)
  • terry white (Tue May 13 2003 - 20:34:43 EDT)
  • Iso Mage (Tue May 13 2003 - 11:56:10 EDT)
• Dubious e-mail: [Fwd: Dell.com (Password Request)]
  • John McCracken (Sat May 31 2003 - 16:25:38 EDT)
  • Rob Shein (Sat May 31 2003 - 11:27:20 EDT)
  • houyachi(at)mindspring.com (Fri May 30 2003 - 12:45:40 EDT)
• Folllow-up to the Hotmail/MSN password reset problems
  • Devilscrow Sr (Wed May 14 2003 - 09:12:30 EDT)
  • Valdis.Kletnieks(at)vt.edu (Fri May 09 2003 - 13:41:09 EDT)
  • Michael Sierchio (Fri May 09 2003 - 11:44:55 EDT)
  • Dan Hanson (Fri May 09 2003 - 01:49:51 EDT)
  • Dowling, Gabrielle (Fri May 09 2003 - 00:45:31 EDT)
  • Dan Hanson (Thu May 08 2003 - 19:17:18 EDT)
• followup to the MSN hotmail and .Net passport change post
  • Dan Hanson (Thu May 08 2003 - 01:17:55 EDT)
• Healthcare Incidents: SUMMARY
  • Paul Farley (Tue May 06 2003 - 18:01:46 EDT)
• Healthcare incidents?
  • Kevin Reardon (Wed May 07 2003 - 12:10:46 EDT)
  • OBrien, Brennan (Wed May 07 2003 - 10:47:40 EDT)
  • Duvall, Ed (Tue May 06 2003 - 16:55:32 EDT)
  • Paul Farley (Tue May 06 2003 - 15:03:44 EDT)
• ICMP/SYN Flood
  • Dr J (Thu May 22 2003 - 20:39:57 EDT)
  • CTA (Thu May 22 2003 - 15:31:55 EDT)
  • Sebastian Jaenicke (Thu May 22 2003 - 15:39:16 EDT)
  • Whiteside, Larry [contractor] (Thu May 22 2003 - 15:36:11 EDT)
  • David Gillett (Thu May 22 2003 - 17:47:23 EDT)
  • Muhammad Naseer Bhatti (Thu May 22 2003 - 15:21:45 EDT)
  • Muhammad Naseer Bhatti (Wed May 21 2003 - 22:47:21 EDT)
• IIS/WebDav Exploit List
  • kyle(at)kylelai.com (Tue May 13 2003 - 20:28:49 EDT)
  • Joe Stewart (Tue May 13 2003 - 09:31:38 EDT)
• is this new ...
  • George Theall (Mon May 26 2003 - 17:26:59 EDT)
  • Brad Arlt (Mon May 26 2003 - 12:43:52 EDT)
  • terry white (Sat May 24 2003 - 10:22:18 EDT)
• Logs showing GET /.hash=...
  • Dan Hanson (Fri May 02 2003 - 16:08:47 EDT)
  • James Williams (Fri May 02 2003 - 09:16:09 EDT)
  • André Luís Quintaes Guimarães (Thu May 01 2003 - 23:54:44 EDT)
  • Arnold, Jamie (Thu May 01 2003 - 19:36:13 EDT)
  • Justin Pryzby (Thu May 01 2003 - 19:12:26 EDT)
  • Jim Dueltgen (Thu May 01 2003 - 13:27:52 EDT)
• More Info: DNS poisoning to Korean address
  • Iso Mage (Wed May 14 2003 - 09:52:39 EDT)
• New attack or old Vulnerability Scanner?
  • Mark Embrich (Thu May 08 2003 - 18:49:48 EDT)
• New intrusion script?
  • Mark Bainter (Thu May 15 2003 - 19:35:19 EDT)
  • Mark Bainter (Thu May 15 2003 - 18:53:29 EDT)
• New Paper on Passive OS Fingerprinting
  • Toby Miller (Tue May 27 2003 - 21:25:02 EDT)
• New SecurityFocus Article: U.S. Information Security Law, Part 3
  • Dan Hanson (Tue May 13 2003 - 20:39:20 EDT)
• OT:Healthcare incidents?
  • Paul Farley (Tue May 06 2003 - 08:28:50 EDT)
• Possible Intrusion Attempt?
  • Jeff (Thu May 29 2003 - 10:10:31 EDT)
  • Keith Owens (Tue May 27 2003 - 23:33:08 EDT)
  • Stewart (Mon May 26 2003 - 15:33:48 EDT)
  • Matt LaFelero (Tue May 27 2003 - 16:35:51 EDT)
  • Lars Duesing (Tue May 27 2003 - 04:10:53 EDT)
  • Brad Webb (Mon May 26 2003 - 22:05:01 EDT)
  • Thomas Zimmerman (Mon May 26 2003 - 01:38:13 EDT)
  • Andersson (no email) (Mon May 26 2003 - 05:53:50 EDT)
  • FWAdmin (Mon May 26 2003 - 10:02:30 EDT)
  • Whiteside, Larry [contractor] (Fri May 23 2003 - 14:46:25 EDT)
  • Rob Shein (Fri May 23 2003 - 14:34:14 EDT)
  • Anders Reed Mohn (Fri May 23 2003 - 05:13:19 EDT)
  • Thomas, Frank (Fri May 23 2003 - 04:41:11 EDT)
  • Jerry Shenk (Thu May 22 2003 - 15:22:15 EDT)
  • Gary Flynn (Thu May 22 2003 - 16:45:00 EDT)
  • Ryan Yagatich (Thu May 22 2003 - 15:43:45 EDT)
  • Whiteside, Larry [contractor] (Thu May 22 2003 - 15:30:59 EDT)
  • Matt LaFelero (Wed May 21 2003 - 19:48:00 EDT)
• Possible Intrusion Attempt?]
  • Michele Chubirka (Fri May 30 2003 - 13:11:51 EDT)
  • Justin Pryzby (Thu May 29 2003 - 15:18:16 EDT)
• proxyprotecor.com
  • abuse(at)race.com (Tue May 20 2003 - 19:54:11 EDT)
• Scans from proxyprotector.com
  • Kurt Seifried (Tue May 27 2003 - 15:22:15 EDT)
  • Rob Shein (Tue May 27 2003 - 12:21:03 EDT)
  • Mark Ng (Tue May 27 2003 - 06:09:40 EDT)
  • Valdis.Kletnieks(at)vt.edu (Thu May 22 2003 - 15:13:44 EDT)
  • Erik Fichtner (Wed May 21 2003 - 13:55:42 EDT)
  • Justin Pryzby (Wed May 21 2003 - 16:28:21 EDT)
  • Kurt Seifried (Wed May 21 2003 - 02:19:35 EDT)
  • Compton, Rich (Tue May 20 2003 - 13:58:39 EDT)
  • Kurt Seifried (Tue May 20 2003 - 07:11:13 EDT)
  • Charles Blackburn (Tue May 20 2003 - 12:44:51 EDT)
  • Charles Blackburn (Mon May 19 2003 - 20:37:54 EDT)
  • Danny (Tue May 20 2003 - 10:17:45 EDT)
  • Charles Blackburn (Mon May 19 2003 - 20:36:14 EDT)
  • Matthew F. Caldwell (Mon May 19 2003 - 14:46:14 EDT)
  • King, Brian (Mon May 19 2003 - 13:57:25 EDT)
  • Charles Blackburn (Mon May 19 2003 - 12:07:38 EDT)
  • Mark Ng (Sun May 18 2003 - 11:17:11 EDT)
  • Shawn Duffy (Sun May 18 2003 - 10:59:13 EDT)
  • Chris Boyd (Sat May 17 2003 - 21:58:21 EDT)
  • Michael Osten (Sat May 17 2003 - 21:24:07 EDT)
  • Jeff (Sat May 17 2003 - 18:12:59 EDT)
  • Charles Blackburn (Sat May 17 2003 - 14:37:22 EDT)
  • Charles Blackburn (Sat May 17 2003 - 14:35:32 EDT)
  • Justin Coffi (Sat May 17 2003 - 13:35:08 EDT)
  • George Theall (Sat May 17 2003 - 12:48:48 EDT)
  • Anthony Papaleo (Sat May 17 2003 - 11:34:29 EDT)
  • Mark Ng (Sat May 17 2003 - 06:31:12 EDT)
  • Chris Boyd (Fri May 16 2003 - 19:31:13 EDT)
• Scans from proxyprotector.com)
  • jlewis(at)lewis.org (Tue May 27 2003 - 22:55:24 EDT)
  • Mark Ng (Tue May 27 2003 - 05:15:01 EDT)
  • Erik V. Olson (Sun May 25 2003 - 23:45:49 EDT)
• SecurityFocus Article Announcement: Starting from Scratch: Formatting and Reinstalling after a Security Incident
  • Dan Hanson (Thu May 08 2003 - 22:31:30 EDT)
• smsx.exe?
  • eden.akhavi(at)ltt.com (Mon May 12 2003 - 10:56:28 EDT)
  • Michael J McCafferty (Mon May 05 2003 - 20:57:58 EDT)
  • Altheide, Cory B. (Mon May 05 2003 - 20:25:32 EDT)
  • Steve Bromwich (Mon May 05 2003 - 13:29:53 EDT)
• Somewhat OT: DNS poisoning to Korean address
  • Anders Reed Mohn (Fri May 16 2003 - 03:17:41 EDT)
• Source 126.0.0.1 UDP/137
  • D Sanchez (Wed May 14 2003 - 01:45:16 EDT)
  • jlepich(at)fidmail.com (Fri May 09 2003 - 17:06:56 EDT)
• Stopping information leakage
  • James C. Slora, Jr. (Wed May 14 2003 - 10:09:10 EDT)
  • Jerry Shenk (Tue May 13 2003 - 18:41:36 EDT)
  • Jerry Shenk (Tue May 13 2003 - 16:58:33 EDT)
  • Stark, Vernon L. (Tue May 13 2003 - 12:32:38 EDT)
• strange cmd.exe access
  • adam (Fri May 30 2003 - 19:23:02 EDT)
  • Frank Knobbe (Sat May 31 2003 - 17:23:03 EDT)
  • Valdis.Kletnieks(at)vt.edu (Fri May 30 2003 - 18:43:44 EDT)
  • H Carvey (Fri May 30 2003 - 18:45:26 EDT)
  • Jeff Adams (Fri May 30 2003 - 18:13:11 EDT)
  • James C. Slora, Jr. (Fri May 30 2003 - 11:27:06 EDT)
  • Q (Thu May 29 2003 - 15:10:25 EDT)
• Stukach Trojaned SysReg.exe
  • Information Security (Fri May 23 2003 - 16:48:06 EDT)
• tcp/1274 scans
  • Bojan Zdrnja (Sat May 17 2003 - 06:37:07 EDT)
  • Aaron Cheek (Thu May 15 2003 - 19:44:02 EDT)
• tcp/554 scans
  • wjnorth (Fri May 16 2003 - 11:03:22 EDT)
  • Manuel Fernandes (Wed May 14 2003 - 21:39:38 EDT)
  • Kevin Patz (Wed May 14 2003 - 09:16:14 EDT)
  • Maciej Bogucki (Wed May 14 2003 - 07:57:05 EDT)
  • Aaron Cheek (Tue May 13 2003 - 20:48:51 EDT)
• TCP/6246
  • Alejandro Flores (Fri May 16 2003 - 08:34:16 EDT)
• Trojan modifying ntdll.dll and cmd.exe
  • Bojan Zdrnja (Sun May 18 2003 - 05:34:22 EDT)
  • Harlan Carvey (Fri May 16 2003 - 06:57:21 EDT)
  • Eric Greenberg (Thu May 15 2003 - 17:33:20 EDT)
• UDP/137 scans -- new worm?
  • Andrew Simmons (Thu May 15 2003 - 07:09:31 EDT)
  • David Gillett (Wed May 14 2003 - 19:19:40 EDT)
• Update on BIND ns_resp.c crash
  • Gaby Vanhegan (Mon May 19 2003 - 05:26:44 EDT)
  • David Conrad (Fri May 16 2003 - 15:58:22 EDT)
  • Gaby Vanhegan (Fri May 16 2003 - 05:31:45 EDT)
• Weird Traffic from www.eyeblaster-bs.com
  • Cushing, David (Fri May 30 2003 - 11:39:28 EDT)
  • Jeremy Junginger (Thu May 29 2003 - 17:44:59 EDT)

  This archive was generated by hypermail 2.1.8 : Wed Aug 23 2006 - 14:02:18 EDT