Security fix for the ALT Linux 5 package ruby version 1.8.6-alt3

Jan. 11, 2008 Kirill A. Shutemov 1.8.6-alt3 - branch based git repository - update to ruby186 svn branch revision 14091 - sync with debian 1.8.6.111-2 + CVE-2007-5162 - install libruby.so into /usr/lib bug 13951 - move arch-depended siteruby to /usr/local/ raorn@ - update macros bug 13933 - add...

Security fix for the ALT Linux 5 package MySQL version 5.0.51-alt1

Jan. 1, 2008 Konstantin Lepikhov 5.0.51-alt1 - 5.0.51. - Security fixes: + CVE-2007-5969 RENAME TABLE System Table Overwrite Vulnerability + CVE-2007-6303 CVE-2007-6304 Server Privilege Escalation And Denial Of Service Vulnerabilities - Update html documentation to 9232 revision...

Security fix for the ALT Linux 9 package wireshark version 0.99.7-alt1

Dec. 23, 2007 Sir Raorn 0.99.7-alt1 - 0.99.7 + CVE-2007-6451 + CVE-2007-6450 + CVE-2007-6441 + CVE-2007-6439 + CVE-2007-6438 + CVE-2007-6121 + CVE-2007-6120 + CVE-2007-6119 + CVE-2007-6118 + CVE-2007-6117 + CVE-2007-6116 + CVE-2007-6115 + CVE-2007-6114 + CVE-2007-6113 + CVE-2007-6112 +...

Security fix for the ALT Linux 7 package libexif version 0.6.16-alt2

Dec. 17, 2007 Dmitriy Khanzhin 0.6.16-alt2 - security fixes: + CVE-2007-6351, CVE-2007-6352 upstream patches + thanks ldv@ for information - licence tag changed to LGPLv2+...

Security fix for the ALT Linux 5 package samba version 3.0.28-alt1

Dec. 10, 2007 Alexander Bokovoy 3.0.28-alt1 - Fixed: + CVE-2007-6015: == Specifically crafted GETDC mailslot requests == can trigger a boundary error in the domain == controller GETDC mail slot support which == can be remotely exploited to execute arbitrary == code. + fix error path in local...

nullsoft-overflow.txt

!/bin/perl Nullsoft Winamp MP4 tags Stack Overflow 0-day discovered and exploited by SYS 49152 Tested on win XP SP2 ENG Tuned for Nullsoft Winamp 5.32 d.i. Shell on port 49152 usage: well, not much fun for you kids here .. to get the shell you have to use ALT+3 and press UPDATE. Instead this one ...

Security fix for the ALT Linux 5 package tomcat5 version 0:5.5.25-alt1_1.1jpp5.0

Nov. 30, 2007 Igor Vlasenko 0:5.5.25-alt11.1jpp5.0 - Updated to 5.5.25, to fix the following issues: CVE-2007-1355 CVE-2007-3386 CVE-2007-3385 CVE-2007-3382 CVE-2007-2450 CVE-2007-2449 - Applied patch20 for CVE-2007-5461 - Applied patch21 for CVE-2007-1358 - Add jasper-eclipse subpackage which is...

Security fix for the ALT Linux 5 package xpdf version 3.02-alt3

Nov. 12, 2007 Victor Forsyuk 3.02-alt3 - Security fixes: - CVE-2007-4352 - CVE-2007-5392 - CVE-2007-5393...

Sql injection

GNOME screensaver 2.20 in Ubuntu 7.10, when used with Compiz, does not properly reserve input focus, which allows attackers with physical access to take control of the session after entering an Alt-Tab sequence, a related issue to CVE-2007-3069...

DEBIAN-CVE-2007-3920

GNOME screensaver 2.20 in Ubuntu 7.10, when used with Compiz, does not properly reserve input focus, which allows attackers with physical access to take control of the session after entering an Alt-Tab sequence, a related issue to CVE-2007-3069...

CVE-2003-1463

CVE-2003-1463 describes an absolute path traversal flaw in Alt-N Technologies WebAdmin 2.0.0–2.0.2. With administrator privileges, an attacker can (1) determine the installation path by reading the Name parameter in a link, and (2) read arbitrary files via an absolute path in the Name parameter. ...

CVE-2003-1463

Absolute path traversal vulnerability in Alt-N Technologies WebAdmin 2.0.0 through 2.0.2 allows remote attackers with administrator privileges to 1 determine the installation path by reading the contents of the Name parameter in a link, and 2 read arbitrary files via an absolute path in the Name...

CVE-2002-2293

Webshots Desktop screensaver allows local users to bypass the password on the screensaver by pressing CTRL-ALT-DELETE and 1 hitting the cancel button or 2 killing the screensaver from the task manager...

Security fix for the ALT Linux 9 package openssl10 version 0.9.8d-alt4

Oct. 10, 2007 Dmitry V. Levin 0.9.8d-alt4 - Backported upstream fix for off-by-one bug in the SSLgetsharedciphers function CVE-2007-5135...

Security fix for the ALT Linux 8 package openssl10 version 0.9.8d-alt4

Oct. 10, 2007 Dmitry V. Levin 0.9.8d-alt4 - Backported upstream fix for off-by-one bug in the SSLgetsharedciphers function CVE-2007-5135...

Security fix for the ALT Linux 9 package openssl1.1 version 0.9.8d-alt4

Oct. 10, 2007 Dmitry V. Levin 0.9.8d-alt4 - Backported upstream fix for off-by-one bug in the SSLgetsharedciphers function CVE-2007-5135...

Security fix for the ALT Linux 6 package eggdrop version 1.6.18-alt2

Sept. 20, 2007 Vladimir V Kamarzin 1.6.18-alt2 - Security fix: CVE-2007-2807: Stack-based buffer overflow in mod/server.mod/servrmsg.c - Recode README.ALT to utf8 and update it - Create pseudouser on %pre stage - Install config to /var/lib/eggdrop - Load module blowfish by default - Change defaul...

Security fix for the ALT Linux 8 package apache2 version 2.2.6-alt1

Sept. 14, 2007 Aleksey Avdeev 2.2.6-alt1 - 2.2.6 - Adding SECURITY to upstream: + CVE-2007-4465 cve.mitre.org - Updating patchs for 2.2.6: + apache2-2.2.5-alt-debian.conf-0.1.patch to apache2-2.2.6-alt-debian.conf-0.1.patch + apache2-2.2.5-alt-configs-0.1.patch to...

Security fix for the ALT Linux 10 package apache2 version 2.2.6-alt1

Sept. 14, 2007 Aleksey Avdeev 2.2.6-alt1 - 2.2.6 - Adding SECURITY to upstream: + CVE-2007-4465 cve.mitre.org - Updating patchs for 2.2.6: + apache2-2.2.5-alt-debian.conf-0.1.patch to apache2-2.2.6-alt-debian.conf-0.1.patch + apache2-2.2.5-alt-configs-0.1.patch to...

Security fix for the ALT Linux 9 package apache2 version 2.2.6-alt1

Sept. 14, 2007 Aleksey Avdeev 2.2.6-alt1 - 2.2.6 - Adding SECURITY to upstream: + CVE-2007-4465 cve.mitre.org - Updating patchs for 2.2.6: + apache2-2.2.5-alt-debian.conf-0.1.patch to apache2-2.2.6-alt-debian.conf-0.1.patch + apache2-2.2.5-alt-configs-0.1.patch to...