Security fix for the ALT Linux 7 package socat version 1.7.1.3-alt1

Aug. 4, 2010 Alex V. Myltsev 1.7.1.3-alt1 - New version: CVE-2010-2799 fixed closes 23839...

Security fix for the ALT Linux 5 package socat version 1.7.1.3-alt1

Aug. 4, 2010 Alex V. Myltsev 1.7.1.3-alt1 - New version: CVE-2010-2799 fixed closes 23839...

Security fix for the ALT Linux 5 package pidgin-mini version 2.7.2-alt1

July 24, 2010 Slava Semushin 2.7.2-alt1 - Updated to 2.7.2 + CVE-2010-2528: crash bug that can be triggered by remote users...

Alt-N SecurityGateway 1.0.1 - 'Username' Remote Buffer Overflow (Metasploit)

$Id: altnsecuritygateway.rb 9719 2010-07-07 17:38:59Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

Security fix for the ALT Linux 5 package openldap2.4 version 2.4.23-alt0.M50P.1

July 1, 2010 Andrey Cherepanov 2.4.23-alt0.M50P.1 - backport to p5 branch security fixes: CVE-2010-0212 and CVE-2010-0211...

Alt-N MDaemon 6.8.5 - WorldClient 'form2raw.cgi' Remote Stack Buffer Overflow (Metasploit)

$Id: mdaemonworldclientform2raw.rb 9653 2010-07-01 23:33:07Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

Security fix for the ALT Linux 5 package openldap2.4 version 2.4.23-alt1

June 30, 2010 Vitaly Kuznetsov 2.4.23-alt1 - 2.4.23 - security fixes: CVE-2010-0212 and CVE-2010-0211...

Security fix for the ALT Linux 5 package libpng version 1.2.44-alt1

June 29, 2010 Dmitry V. Levin 1.2.44-alt1 - Updated to 1.2.44 fixes: CVE-2010-1205, CVE-2010-2249...

Security fix for the ALT Linux 6 package libpng version 1.2.44-alt1

June 29, 2010 Dmitry V. Levin 1.2.44-alt1 - Updated to 1.2.44 fixes: CVE-2010-1205, CVE-2010-2249...

Security fix for the ALT Linux 8 package 389-ds-base version 1.2.5-alt2

June 17, 2010 Vitaly Kuznetsov 1.2.5-alt2 - CVE-2010-2222...

Security fix for the ALT Linux 5 package samba version 3.0.37-alt2.M50P.1

June 16, 2010 Vitaly Kuznetsov 3.0.37-alt2.M50P.1 - CVE-2010-2063...

Alt-N MDaemon 9.6.4 - IMAPD FETCH Buffer Overflow (Metasploit)

$Id: mdaemonfetch.rb 9525 2010-06-15 07:18:08Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/...

Security fix for the ALT Linux 5 package pidgin-mini version 2.7.1-alt1

June 13, 2010 Slava Semushin 2.7.1-alt1 - Updated to 2.7.1 + CVE-2010-0013: MSN local file disclosure vulnerability + CVE-2010-0277: remote MSN SLP crash + CVE-2010-0420: remote Finch XMPP crash + CVE-2010-0423: remote smiley freeze/CPU pegging DoS + CVE-2010-1624: MSN emoticon DoS - Added...

CVE-2010-2125

Multiple cross-site scripting XSS vulnerabilities in the Rotor Banner module 5.x before 5.x-1.8 and 6.x before 6.x-2.5 for Drupal allow remote authenticated users, with "create rotor item" or "edit any rotor item" privileges, to inject arbitrary web script or HTML via the 1 srs, 2 title, or 3 alt...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in the Rotor Banner module 5.x before 5.x-1.8 and 6.x before 6.x-2.5 for Drupal allow remote authenticated users, with "create rotor item" or "edit any rotor item" privileges, to inject arbitrary web script or HTML via the 1 srs, 2 title, or 3 alt...

Security fix for the ALT Linux 6 package sudo version 1:1.6.8p12-alt8

June 1, 2010 Dmitry V. Levin 1:1.6.8p12-alt8 - Backported upstream fix for CVE-2010-1163 envreset, ignoredot and securepath sudoers options all had to be explicitly disabled to make an attack possible. - Backported upstream fix for CVE-2010-1646 envreset sudoers option had to be explicitly disabl...

Security fix for the ALT Linux 8 package sudo version 1:1.6.8p12-alt8

June 1, 2010 Dmitry V. Levin 1:1.6.8p12-alt8 - Backported upstream fix for CVE-2010-1163 envreset, ignoredot and securepath sudoers options all had to be explicitly disabled to make an attack possible. - Backported upstream fix for CVE-2010-1646 envreset sudoers option had to be explicitly disabl...

Security fix for the ALT Linux 8 package qt4 version 4.6.2-alt3

May 19, 2010 Sergey V Turchin 4.6.2-alt3 - update kde-qt patches - add cups fixes - add fixes for CVE-2010-0047 CVE-2010-0051 CVE-2010-0054 CVE-2010-0648 CVE-2010-0656 CVE-2010-0046 CVE-2010-0049 CVE-2010-0050 CVE-2010-0052 ALT23506...

Security fix for the ALT Linux 5 package qt4 version 4.5.3-alt3.M50P.1

May 19, 2010 Sergey V Turchin 4.5.3-alt3.M50P.1 - add fixes for CVE-2010-0046 CVE-2010-0049 CVE-2010-0050 CVE-2010-0052 CVE-2010-0047 CVE-2010-0054 CVE-2010-0656...

Apple Safari 4.0.5 - parent.close() Memory Corruption Code Execution

Apple Safari 4.0.5 - parent.close Memory Corruption Code Execution Tested on: Apple Safari 4.0.5 / XP SP2 Polish Shellcode: Windows Execute Command calc Local: Yes Remote: Yes POPUP must be enabled Ctrl+Shift+K Just for fun ; -- window.open"0day.htm"; //parent.close activation self.close;...