Security fix for the ALT Linux 5 package samba version 3.0.25-alt1

May 14, 2007 Alexander Bokovoy 3.0.25-alt1 - New release - Security fixes for CVE-2007-2444, CVE-2007-2446, and CVE-2007-2447: + CVE-2007-2444 Versions: Samba 3.0.23d - 3.0.25pre2 Local SID/Name translation bug can result in user privilege elevation + CVE-2007-2446 Versions: Samba 3.0.0 - 3.0.24...

Security fix for the ALT Linux 10 package xorg-server version 2:1.3.0.0-alt2

April 30, 2007 Valery Inozemtsev 2:1.3.0.0-alt2 - Mesa-6.5.3 - fixed CVE-2007-1356...

Security fix for the ALT Linux 6 package lha version 2:1.14i-alt2

April 15, 2007 Michael Shigorin 2:1.14i-alt2 - ac20050924p1: security fixes for CVE-2006-4335, CVE-2006-4337, CVE-2006-4338 DoS, system access - removed patch1, patch2, patch4, patch5 didn't apply...

Security fix for the ALT Linux 6 package fetchmail version 6.3.8-alt1

April 7, 2007 Michael Shigorin 6.3.8-alt1 - 6.3.8 + APOP was strengthened to make the CVE-2007-1558 attack harder + crash when opening the BSMTP output file failed was fixed + other fixes and improvements...

Security fix for the ALT Linux 10 package xorg-server version 2:1.2.99.903-alt3

April 3, 2007 Valery Inozemtsev 2:1.2.99.903-alt3 - fixed CVE-2007-1003: XC-MISC Extension ProcXCMiscGetXIDList Memory Corruption...

Security fix for the ALT Linux 5 package centerim version 4.21.0-alt5

Feb. 16, 2007 Ilya Mashkin 4.21.0-alt5 - fix 10786 connect to Jabber on 64-bit systems - fix CVE-2007-0160...

Security fix for the ALT Linux 9 package wireshark version 0.99.5-alt1

Feb. 4, 2007 Sir Raorn 0.99.5-alt1 - 0.99.5 + CVE-2007-0459 + CVE-2007-0458 + CVE-2007-0457 + CVE-2007-0456 - User Guide updated...

Security fix for the ALT Linux 10 package xorg-server version 2:1.1.99.903-alt5

Jan. 9, 2007 Valery Inozemtsev 2:1.1.99.903-alt5 - security fix CVE-2006-6101, CVE-2006-6102, CVE-2006-6103 - added Mesa-6.5.2-git-PolygonMode-bug9578.patch, xorg-server-1.1.99.901-glXDRIbindTexImage-target.patch, xorg-server-1.1.99.903-dont-backfill-bg-none.patch,...

Security fix for the ALT Linux 6 package fetchmail version 6.3.6-alt1

Jan. 8, 2007 Michael Shigorin 6.3.6-alt1 - 6.3.6: minor security update CVE-2006-5867, CVE-2006-5974 - replaced Debian menufile with Freedesktop one - spec macro abuse cleanup - NB: added Packager: but I don't use fetchmail for quite a while...

Security fix for the ALT Linux 8 package proftpd version 1.3.0rel-alt1.3

Nov. 14, 2006 Konstantin Lepikhov 1.3.0rel-alt1.3 - fix null reference in CVE-2006-5815 patch made by upstream...

Security fix for the ALT Linux 8 package proftpd version 1.3.0rel-alt1.2

Nov. 13, 2006 Konstantin Lepikhov 1.3.0rel-alt1.2 - Security fix for CVE-2006-5815 "CommandBufferSize" Directive Remote Code Execution Vulnerability...

MDaemon WebAdmin模块权限提升漏洞

WebAdmin是Alt-N开发的管理MDaemon、RelayFax和WorldClient的WEB应用程序。 由于没有正确的过滤管理界面的logfileview.wdm和configfileview.wdm文件，导致已认证的全局管理员可以通过类似于以下的方式访问基础文件系统： http://mdaemon:1000/configfileview.wdm?file=../../autoexec.bat http://mdaemon:1000/logfileview.wdm?type=webadmin&file=../../App/userlist.dat...

CVE-2006-5709

Unspecified vulnerability in WorldClient in Alt-N Technologies MDaemon before 9.50 has unknown impact and attack vectors related to a "JavaScript exploit."...

CVE-2006-5708

Multiple unspecified vulnerabilities in MDaemon and WorldClient in Alt-N Technologies MDaemon before 9.50 allow attackers to cause a denial of service memory consumption via unspecified vectors resulting in memory leaks...

CVE-2006-5709

Unspecified vulnerability in WorldClient in Alt-N Technologies MDaemon before 9.50 has unknown impact and attack vectors related to a "JavaScript exploit."...

CVE-2006-5708

Multiple unspecified vulnerabilities in MDaemon and WorldClient in Alt-N Technologies MDaemon before 9.50 allow attackers to cause a denial of service memory consumption via unspecified vectors resulting in memory leaks...

CVE-2006-5708

MDaemon and WorldClient (Alt‑N Technologies MDaemon) before 9.50 are affected by CVE-2006-5708 due to multiple unspecified vulnerabilities that allow a denial of service via memory consumption leading to memory leaks. The issue affects MDaemon and WorldClient prior to version 9.50. Root cause vec...

CVE-2006-5709

Technical details about CVE-2006-5709 are not publicly provided in the supplied documents. Monitor for updates; no affected products, exploit info, or remediation details are confirmed here.

Security fix for the ALT Linux 8 package openssl10 version 0.9.7g-alt5

Sept. 27, 2006 Dmitry V. Levin 0.9.7g-alt5 - Applied upstream fixes for DoS bugs in ASN1 parser CVE-2006-2937, CVE-2006-2940. - Applied fix for buffer overflow in SSLgetsharedciphers, discovery and patch from Tavis Ormandy and Will Drewry of the Google Security Team CVE-2006-3738. - Applied fix f...

Security fix for the ALT Linux 9 package openssl1.1 version 0.9.7g-alt5

Sept. 27, 2006 Dmitry V. Levin 0.9.7g-alt5 - Applied upstream fixes for DoS bugs in ASN1 parser CVE-2006-2937, CVE-2006-2940. - Applied fix for buffer overflow in SSLgetsharedciphers, discovery and patch from Tavis Ormandy and Will Drewry of the Google Security Team CVE-2006-3738. - Applied fix f...