Security fix for the ALT Linux 9 package wireshark version 0.99.5-alt1

Feb. 4, 2007 Sir Raorn 0.99.5-alt1 - 0.99.5 + CVE-2007-0459 + CVE-2007-0458 + CVE-2007-0457 + CVE-2007-0456 - User Guide updated...

Security fix for the ALT Linux 10 package xorg-server version 2:1.1.99.903-alt5

Jan. 9, 2007 Valery Inozemtsev 2:1.1.99.903-alt5 - security fix CVE-2006-6101, CVE-2006-6102, CVE-2006-6103 - added Mesa-6.5.2-git-PolygonMode-bug9578.patch, xorg-server-1.1.99.901-glXDRIbindTexImage-target.patch, xorg-server-1.1.99.903-dont-backfill-bg-none.patch,...

Security fix for the ALT Linux 6 package fetchmail version 6.3.6-alt1

Jan. 8, 2007 Michael Shigorin 6.3.6-alt1 - 6.3.6: minor security update CVE-2006-5867, CVE-2006-5974 - replaced Debian menufile with Freedesktop one - spec macro abuse cleanup - NB: added Packager: but I don't use fetchmail for quite a while...

Security fix for the ALT Linux 8 package proftpd version 1.3.0rel-alt1.3

Nov. 14, 2006 Konstantin Lepikhov 1.3.0rel-alt1.3 - fix null reference in CVE-2006-5815 patch made by upstream...

Security fix for the ALT Linux 8 package proftpd version 1.3.0rel-alt1.2

Nov. 13, 2006 Konstantin Lepikhov 1.3.0rel-alt1.2 - Security fix for CVE-2006-5815 "CommandBufferSize" Directive Remote Code Execution Vulnerability...

MDaemon WebAdmin模块权限提升漏洞

WebAdmin是Alt-N开发的管理MDaemon、RelayFax和WorldClient的WEB应用程序。 由于没有正确的过滤管理界面的logfileview.wdm和configfileview.wdm文件，导致已认证的全局管理员可以通过类似于以下的方式访问基础文件系统： http://mdaemon:1000/configfileview.wdm?file=../../autoexec.bat http://mdaemon:1000/logfileview.wdm?type=webadmin&file=../../App/userlist.dat...

CVE-2006-5708

Multiple unspecified vulnerabilities in MDaemon and WorldClient in Alt-N Technologies MDaemon before 9.50 allow attackers to cause a denial of service memory consumption via unspecified vectors resulting in memory leaks...

CVE-2006-5709

Unspecified vulnerability in WorldClient in Alt-N Technologies MDaemon before 9.50 has unknown impact and attack vectors related to a "JavaScript exploit."...

CVE-2006-5708

Multiple unspecified vulnerabilities in MDaemon and WorldClient in Alt-N Technologies MDaemon before 9.50 allow attackers to cause a denial of service memory consumption via unspecified vectors resulting in memory leaks...

CVE-2006-5709

Unspecified vulnerability in WorldClient in Alt-N Technologies MDaemon before 9.50 has unknown impact and attack vectors related to a "JavaScript exploit."...

CVE-2006-5708

Alt-N Technologies MDaemon and WorldClient products are susceptible to multiple unspecified vulnerabilities in versions prior to 9.50 . These flaws allow an attacker to trigger a denial of service (DoS) condition caused by high memory consumption and subsequent memory leaks via unspecified vector...

CVE-2006-5709

Technical details about CVE-2006-5709 are not publicly provided in the supplied documents. Monitor for updates; no affected products, exploit info, or remediation details are confirmed here.

CVE-2006-5708: Uncontrolled Resource Consumption

Multiple unspecified vulnerabilities in MDaemon and WorldClient in Alt-N Technologies MDaemon before 9.50 allow attackers to cause a denial of service memory consumption via unspecified vectors resulting in memory leaks...

Security fix for the ALT Linux 9 package openssl1.1 version 0.9.7g-alt5

Sept. 27, 2006 Dmitry V. Levin 0.9.7g-alt5 - Applied upstream fixes for DoS bugs in ASN1 parser CVE-2006-2937, CVE-2006-2940. - Applied fix for buffer overflow in SSLgetsharedciphers, discovery and patch from Tavis Ormandy and Will Drewry of the Google Security Team CVE-2006-3738. - Applied fix f...

Security fix for the ALT Linux 8 package openssl10 version 0.9.7g-alt5

Sept. 27, 2006 Dmitry V. Levin 0.9.7g-alt5 - Applied upstream fixes for DoS bugs in ASN1 parser CVE-2006-2937, CVE-2006-2940. - Applied fix for buffer overflow in SSLgetsharedciphers, discovery and patch from Tavis Ormandy and Will Drewry of the Google Security Team CVE-2006-3738. - Applied fix f...

CVE-2006-4620

The usereditaccount.wdm module in Alt-N WebAdmin 3.2.5 running with MDaemon 9.0.6, and possibly earlier versions, allows remote authenticated domain administrators to gain privileges and obtain access to the system mail queue by modifying the mailbox of the MDaemon user account to use the mailbox...

CVE-2006-4620

CVE-2006-4620 affects Alt-N WebAdmin 3.2.5 (and possibly earlier) used with MDaemon 9.0.6. The issue allows remote authenticated domain administrators to escalate privileges and access the system mail queue by modifying the MDaemon user mailbox to use another account’s mailbox. Public sources cor...

CVE-2006-4620

The usereditaccount.wdm module in Alt-N WebAdmin 3.2.5 running with MDaemon 9.0.6, and possibly earlier versions, allows remote authenticated domain administrators to gain privileges and obtain access to the system mail queue by modifying the mailbox of the MDaemon user account to use the mailbox...

CVE-2006-4620: Undefined Security Weakness

The usereditaccount.wdm module in Alt-N WebAdmin 3.2.5 running with MDaemon 9.0.6, and possibly earlier versions, allows remote authenticated domain administrators to gain privileges and obtain access to the system mail queue by modifying the mailbox of the MDaemon user account to use the mailbox...

KLA10390 LPE vulnerability in WebAdmin

An nspecified vulnerability was found in WebAdmin. By exploiting this vulnerability malicious users can gain privileges. This vulnerability can be exploited remotely via mailbox manipulations. Original advisories - Exploitation Related products WebAdmin CVE list CVE-2006-4620 warning Solution...