Security fix for the ALT Linux 8 package 389-ds-base version 1.2.5-alt2

June 17, 2010 Vitaly Kuznetsov 1.2.5-alt2 - CVE-2010-2222...

Security fix for the ALT Linux 5 package samba version 3.0.37-alt2.M50P.1

June 16, 2010 Vitaly Kuznetsov 3.0.37-alt2.M50P.1 - CVE-2010-2063...

Alt-N MDaemon 9.6.4 - IMAPD FETCH Buffer Overflow (Metasploit)

$Id: mdaemonfetch.rb 9525 2010-06-15 07:18:08Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/...

Security fix for the ALT Linux 5 package pidgin-mini version 2.7.1-alt1

June 13, 2010 Slava Semushin 2.7.1-alt1 - Updated to 2.7.1 + CVE-2010-0013: MSN local file disclosure vulnerability + CVE-2010-0277: remote MSN SLP crash + CVE-2010-0420: remote Finch XMPP crash + CVE-2010-0423: remote smiley freeze/CPU pegging DoS + CVE-2010-1624: MSN emoticon DoS - Added...

CVE-2010-2125

Multiple cross-site scripting XSS vulnerabilities in the Rotor Banner module 5.x before 5.x-1.8 and 6.x before 6.x-2.5 for Drupal allow remote authenticated users, with "create rotor item" or "edit any rotor item" privileges, to inject arbitrary web script or HTML via the 1 srs, 2 title, or 3 alt...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in the Rotor Banner module 5.x before 5.x-1.8 and 6.x before 6.x-2.5 for Drupal allow remote authenticated users, with "create rotor item" or "edit any rotor item" privileges, to inject arbitrary web script or HTML via the 1 srs, 2 title, or 3 alt...

Security fix for the ALT Linux 6 package sudo version 1:1.6.8p12-alt8

June 1, 2010 Dmitry V. Levin 1:1.6.8p12-alt8 - Backported upstream fix for CVE-2010-1163 envreset, ignoredot and securepath sudoers options all had to be explicitly disabled to make an attack possible. - Backported upstream fix for CVE-2010-1646 envreset sudoers option had to be explicitly disabl...

Security fix for the ALT Linux 8 package sudo version 1:1.6.8p12-alt8

June 1, 2010 Dmitry V. Levin 1:1.6.8p12-alt8 - Backported upstream fix for CVE-2010-1163 envreset, ignoredot and securepath sudoers options all had to be explicitly disabled to make an attack possible. - Backported upstream fix for CVE-2010-1646 envreset sudoers option had to be explicitly disabl...

Security fix for the ALT Linux 5 package qt4 version 4.5.3-alt3.M50P.1

May 19, 2010 Sergey V Turchin 4.5.3-alt3.M50P.1 - add fixes for CVE-2010-0046 CVE-2010-0049 CVE-2010-0050 CVE-2010-0052 CVE-2010-0047 CVE-2010-0054 CVE-2010-0656...

Security fix for the ALT Linux 8 package qt4 version 4.6.2-alt3

May 19, 2010 Sergey V Turchin 4.6.2-alt3 - update kde-qt patches - add cups fixes - add fixes for CVE-2010-0047 CVE-2010-0051 CVE-2010-0054 CVE-2010-0648 CVE-2010-0656 CVE-2010-0046 CVE-2010-0049 CVE-2010-0050 CVE-2010-0052 ALT23506...

Apple Safari 4.0.5 - parent.close() Memory Corruption Code Execution

Apple Safari 4.0.5 - parent.close Memory Corruption Code Execution Tested on: Apple Safari 4.0.5 / XP SP2 Polish Shellcode: Windows Execute Command calc Local: Yes Remote: Yes POPUP must be enabled Ctrl+Shift+K Just for fun ; -- window.open"0day.htm"; //parent.close activation self.close;...

Apple Safari 4.0.5 - 'parent.close()' Memory Corruption Code Execution

Tested on: Apple Safari 4.0.5 / XP SP2 Polish Shellcode: Windows Execute Command calc Local: Yes Remote: Yes POPUP must be enabled Ctrl+Shift+K Just for fun ; -- window.open"0day.htm"; //parent.close activation self.close;...

Security fix for the ALT Linux 5 package fetchmail version 6.3.17-alt1

May 9, 2010 Andrey Rahmatullin 6.3.17-alt1 - 6.3.17 + CVE-2010-1167: DoS in debug mode with multichar locales...

Security fix for the ALT Linux 6 package fetchmail version 6.3.17-alt1

May 9, 2010 Andrey Rahmatullin 6.3.17-alt1 - 6.3.17 + CVE-2010-1167: DoS in debug mode with multichar locales...

Alt-N MDaemon SUBSCRIBE Remote Information Disclosure Vulnerability

MDaemon is prone to an information-disclosure vulnerability because it fails to sufficiently sanitize user-supplied input. Exploiting this issue may allow an attacker to gain access to information from arbitrary files on the vulnerable server. MDaemon 11.0.1 is vulnerable; other versions may also...

Alt-N MDaemon 11.0.1邮件列表订阅目录遍历漏洞

Alt-N MDaemon是一款基于Windows的邮件服务程序，WorldClient是其客户端。 MDaemon支持邮件列表功能。在配置邮件列表时，MDaemon会将邮件列表的配置存储在MDaemonDir（通常为 C:\MDaemon）\App目录下扩展名为grp的文件中，邮件列表组文件大致为： ---snip--- Mailing List file ; ListName = [email protected] ; Private = N ; HideFromAddressBook = N ; AllowExpn = Y ; ListNameInSubject = Y...

Alt-N MDaemon < 11.0.1 Multiple Remote DoS Vulnerabilities

Binary data 5517.prm...

Alt-N MDaemon < 11.0.1 Multiple Remote DoS

The remote Windows host contains a version of Alt-N MDaemon that is earlier than 11.0.1. As such, it is prone to multiple remote denial of service attacks. An attacker may exploit these issues to deny the application's services to legitimate users. %NASLMINLEVEL 70300 C Tenable Network Security,...

DEBIAN-CVE-2010-1194

The matchcomponent function in smtp-tls.c in libESMTP 1.0.3.r1, and possibly other versions including 1.0.4, treats two strings as equal if one is a substring of the other, which allows remote attackers to spoof trusted certificates via a crafted subjectAltName...

Security fix for the ALT Linux 5 package fetchmail version 6.3.14-alt1

March 27, 2010 Andrey Rahmatullin 6.3.14-alt1 - 6.3.14 + CVE-2010-0562: heap overrun in verbose SSL cert' info display - package COPYING - remove Packager: - fix buildreqs - fix configure warnings about GSSAPI headers - fix using optflags...