Section: .. / UNIX / patches /
| /// File Name: |
ffingerd-1.20p2.patch.gz |
Description:
|
Patch for several ffingerd vulnerabilities discovered last week.
| | File Size: | 1434 | | Last Modified: | Aug 16 20:05:19 1999 |
| MD5 Checksum: | f3c44bded5b81d8036df9cc23a6adc58 |
|
| /// File Name: |
fp-2.4.20.patch.gz |
Description:
|
The Linux-kernel security patch for kernel v2.4.20 includes security improvements that implement random PIDs, random port numbers for IPv4, NAT, and IPv6, and enhanced random numbers for networking. Patch for kernel 2.4.19 is also available.
| | Homepage: | http://www.vanheusden.com/Linux/sp | | File Size: | 3568 | | Last Modified: | Dec 29 01:17:17 2002 |
| MD5 Checksum: | b48e2c548650b8e4d6bea098fb4d5ab9 |
|
| /// File Name: |
fp-2.4.22.patch.gz |
Description:
|
The Linux-kernel security patch for kernel v2.4.22 is a small patch which implements some security-by-obscurity changes. Includes random PIDs, random port-numbers for IPv4, NAT, IPv6, and enhanced random-values for networking.
| | Author: | Folkert van Heusden | | Homepage: | http://www.vanheusden.com/Linux/sp | | File Size: | 3567 | | Last Modified: | Oct 30 14:12:51 2003 |
| MD5 Checksum: | c1d28e0a1038ab27c8fa6729f13eaa85 |
|
| /// File Name: |
freeradius-wpe-2.0.2.patch.txt |
Description:
|
A patch for the popular open-source FreeRADIUS implementation to demonstrate RADIUS impersonation vulnerabilities by Joshua Wright and Brad Antoniewicz, demonstrated at Shmoocon 4.
| | File Size: | 36344 | | Last Modified: | Feb 22 20:01:55 2008 |
| MD5 Checksum: | 6671917d602373d8010fe38de66377e4 |
|
| /// File Name: |
ftpd.c |
Description:
|
OpenBSD ftpd unofficial patch - The patch released to remedy the problem with the 1 byte overflow problem was junk, to remedy i recoded the original ftpd.c file with the fix. This takes the bite out of fixing this problem. Replace the original ftpd.c with this and recompile.
| | Author: | Malicious Code | | Homepage: | http://www.teamvirus.net | | File Size: | 62388 | | Last Modified: | Dec 21 18:29:15 2000 |
| MD5 Checksum: | f71cc0a7ea0094aedbc7e4ade631f83e |
|
| /// File Name: |
ggsniff-1.0-dsniff-2.3-patch |
Description:
|
Patch for dsniff-2.3 that allows you to record gadu-gadu messages, a popular communicator in Poland.
| | Author: | Ryba | | File Size: | 3853 | | Last Modified: | Apr 6 01:50:09 2002 |
| MD5 Checksum: | e5a4a2ad6f170d1a5f8ab980a3fa8cb9 |
|
| /// File Name: |
ggsniff-1.1b-dsniff-2.3-patch |
Description:
|
Patch for dsniff-2.3 that allows you to record gadu-gadu messages, a popular communicator in Poland.
| | Author: | Ryba | | Changes: | Local and remote users' IP addresses can be shown, added switch -p for disabling promiscuous mode (useful on routers), added support for extension in new GG protocol. Other small bugfixes and improvements were made. | | File Size: | 13558 | | Last Modified: | Sep 12 09:15:27 2002 |
| MD5 Checksum: | 346436959f8326ab489ecf61618b5180 |
|
| /// File Name: |
ggsniff-1.1c-dsniff-2.3-patch |
Description:
|
Patch for dsniff-2.3 that allows you to record gadu-gadu messages, a popular communicator in Poland.
| | Author: | Ryba | | Changes: | Fixed a cut and paste bug. | | File Size: | 13613 | | Last Modified: | Sep 17 07:59:39 2002 |
| MD5 Checksum: | aabbdcfc492b95086ac9d2cc518a8e8e |
|
| /// File Name: |
ggsniff-1.2.tar.gz |
Description:
|
Patch for dsniff-2.3 that allows you to record gadu-gadu messages, a popular communicator in Poland.
| | Author: | Ryba | | Changes: | Added password sniffing. ;Homepages: here (in polish) and here (in english). | | File Size: | 7489 | | Last Modified: | Nov 1 03:21:18 2002 |
| MD5 Checksum: | 01d906aeebabe1ecce0d84b91c11b1dd |
|
| /// File Name: |
gnupg-1.0.4.security-patch1.diff |
Description:
|
Patch for GnuPG v1.04 to fix the signature verification vulnerability which can easily lead to false positives.
| | Homepage: | http://www.gnupg.org | | File Size: | 4961 | | Last Modified: | Dec 22 00:33:59 2000 |
| MD5 Checksum: | 5ecf97501eeaa8b8feef1d0a63747657 |
|
| /// File Name: |
hap-linux-2.0.38-5.diff.gz |
Description:
|
HAP-Linux is a collection of security related patches which are designed to be applied after Solar Designers Openwall patches are installed. Changes include some extra information in the printks, and the ability to allow hard links to files you don't own which are in your group, and the ability to follow links & pipes in +t directories iff they are not world-writable. This is useful for getting various daemons to run chrooted as a non-root user, and some secure drop- directory stuff.
| | Homepage: | http://www.doutlets.com/downloadables/hap.phtml | | Changes: | Minor security fixes - ioctl protections in chroot, and other bug fixes. | | File Size: | 10959 | | Last Modified: | Feb 21 17:12:19 2001 |
| MD5 Checksum: | e3fe345fa59e5f5835a785154ce25880 |
|
| /// File Name: |
hap-linux-2.2.18-2.diff.gz |
Description:
|
HAP-Linux is a collection of security related patches which are designed to be applied after Solar Designers Openwall patches are installed. Changes include some extra information in the printks, and the ability to allow hard links to files you don't own which are in your group, and the ability to follow links & pipes in +t directories iff they are not world-writable. This is useful for getting various daemons to run chrooted as a non-root user, and some secure drop- directory stuff.
| | Homepage: | http://www.doutlets.com/downloadables/hap.phtml | | File Size: | 11346 | | Last Modified: | Feb 6 15:39:45 2001 |
| MD5 Checksum: | 631921ff0e6e194844a7b3caa0221aff |
|
| /// File Name: |
hap-linux-2.2.18-4.diff.gz |
Description:
|
HAP-Linux is a collection of security related patches which are designed to be applied after Solar Designers Openwall patches are installed. Changes include some extra information in the printks, and the ability to allow hard links to files you don't own which are in your group, and the ability to follow links & pipes in +t directories iff they are not world-writable. This is useful for getting various daemons to run chrooted as a non-root user, and some secure drop- directory stuff.
| | Homepage: | http://www.doutlets.com/downloadables/hap.phtml | | Changes: | Minor security fixes - ioctl protections in chroot, and other bug fixes. | | File Size: | 11930 | | Last Modified: | Feb 21 17:10:43 2001 |
| MD5 Checksum: | bec6b72aff70d0ac802b89a593af4ea5 |
|
| /// File Name: |
hap-linux-2.2.19-3.diff.gz |
Description:
|
HAP-Linux is a collection of security related patches which are designed to be applied after Solar Designers Openwall patches are installed. Changes include some extra information in the printks, and the ability to allow hard links to files you don't own which are in your group, and the ability to follow links & pipes in +t directories iff they are not world-writable. This is useful for getting various daemons to run chrooted as a non-root user, and some secure drop- directory stuff.
| | Homepage: | http://www.doutlets.com/downloadables/hap.phtml | | Changes: | A fix for a compile bug on non-x86 platforms, and a fix for weakening hardlink restrictions when CONFIG_SECURE_NOTSOMUCH is enabled. | | File Size: | 12838 | | Last Modified: | May 8 19:29:13 2001 |
| MD5 Checksum: | 4e90fc9810ee92e68a3b4af18b6dd0b1 |
|
| /// File Name: |
hap-linux-2.2.19-4.diff |
Description:
|
HAP-Linux is a collection of security related patches which are designed to be applied after Solar Designers Openwall patches are installed. Changes include some extra information in the printks, and the ability to allow hard links to files you don't own which are in your group, and the ability to follow links & pipes in +t directories if they are not world-writable. This is useful for getting various daemons to run chrooted as a non-root user, and some secure drop- directory stuff.
| | Homepage: | http://www.doutlets.com/downloadables/hap.phtml | | Changes: | Based on hap-linux-2.2.19-3.diff.gz which fixes the possible local root vulnerability discovered recently in kernel v2.2.19. | | File Size: | 75373 | | Last Modified: | Oct 20 04:42:09 2001 |
| MD5 Checksum: | a8f11388a5483280ea0adfc7ae2e9bc6 |
|
| /// File Name: |
hap-linux-2.2.20-3.diff |
Description:
|
HAP-Linux is a collection of security related patches which are designed to be applied after Solar Designers Openwall patches are installed. Changes include some extra information in the printks, and the ability to allow hard links to files you don't own which are in your group, and the ability to follow links & pipes in +t directories if they are not world-writable. This is useful for getting various daemons to run chrooted as a non-root user, and some secure drop- directory stuff.
| | Author: | Hank Leininger | | Homepage: | http://www.TheAIMSGroup.com/~hlein/hap-linux | | Changes: | Includes Solar Designer's Openwall 2.2.20-ow2, fixing a Linux kernel vulnerability that allows users to kill any process. There are also fixes to the capabilities dropping of chroot(2). The cap_to_mask stuff was biffed, and now actually works. | | File Size: | 79909 | | Last Modified: | Mar 8 02:07:59 2002 |
| MD5 Checksum: | 4251871ab54cd5e20935cbd1849e6e72 |
|
| /// File Name: |
hap-linux-2.2.20-5.diff.gz |
Description:
|
HAP-Linux is a collection of security related patches which are designed to be applied after Solar Designers Openwall patches are installed. Changes include some extra information in the printks, and the ability to allow hard links to files you don't own which are in your group, and the ability to follow links & pipes in +t directories if they are not world-writable. This is useful for getting various daemons to run chrooted as a non-root user, and some secure drop- directory stuff.
| | Author: | Hank Leininger | | Homepage: | http://www.TheAIMSGroup.com/~hlein/hap-linux | | Changes: | Now has logging of open directory FDs by chrooting processes, and various chroot capability dropping changes and fixes. Split fatal-signal logging into two buckets, so an attacker could not trigger log-throttling by causing an unprivileged segfault right before attacking privileged processes. | | File Size: | 15381 | | Last Modified: | Apr 6 02:45:49 2002 |
| MD5 Checksum: | c6b700af0880cb67009535af4f0cb9a4 |
|
| /// File Name: |
hap-linux-2.2.21-1.diff.gz |
Description:
|
HAP-Linux is a collection of security related patches which are designed to be applied after Solar Designers Openwall patches are installed. Changes include some extra information in the printks, and the ability to allow hard links to files you don't own which are in your group, and the ability to follow links & pipes in +t directories if they are not world-writable. This is useful for getting various daemons to run chrooted as a non-root user, and some secure drop- directory stuff.
| | Author: | Hank Leininger | | Homepage: | http://www.TheAIMSGroup.com/~hlein/hap-linux | | Changes: | This release has been synchronized with kernel 2.2.21 and Openwall 2.2.21-1. | | File Size: | 15284 | | Last Modified: | Jun 3 01:38:03 2002 |
| MD5 Checksum: | 67511c74366e9200d7065dcbdafb779d |
|
| /// File Name: |
hap-linux-2.2.22-1.diff.gz |
Description:
|
HAP-Linux is a collection of security related patches which are designed to be applied after Solar Designers Openwall patches are installed. Changes include some extra information in the printks, and the ability to allow hard links to files you don't own which are in your group, and the ability to follow links & pipes in +t directories if they are not world-writable. This is useful for getting various daemons to run chrooted as a non-root user, and some secure drop- directory stuff.
| | Author: | Hank Leininger | | Homepage: | http://www.TheAIMSGroup.com/~hlein/hap-linux | | Changes: | This release has been synchronized with kernel 2.2.22 and Openwall 2.2.22-ow1. | | File Size: | 15441 | | Last Modified: | Sep 20 12:27:18 2002 |
| MD5 Checksum: | 02959f4fcbabb9904350b1cf9e1c1413 |
|
| /// File Name: |
hap-linux-2.2.23-1.diff.gz |
Description:
|
HAP-Linux is a collection of security related patches which are designed to be applied after Solar Designers Openwall patches are installed. Changes include some extra information in the printks, and the ability to allow hard links to files you don't own which are in your group, and the ability to follow links & pipes in +t directories if they are not world-writable. This is useful for getting various daemons to run chrooted as a non-root user, and some secure drop- directory stuff.
| | Author: | Hank Leininger | | Homepage: | http://www.TheAIMSGroup.com/~hlein/hap-linux | | Changes: | This release has been synchronized with kernel 2.2.23 and Openwall 2.2.23-ow1. | | File Size: | 15458 | | Last Modified: | Dec 27 18:15:02 2002 |
| MD5 Checksum: | 7d540037dc6995679bbd8eb50a3f1a95 |
|
| /// File Name: |
hap-linux-2.2.26-1.diff |
Description:
|
HAP-Linux is a collection of security related patches which are designed to be applied after Solar Designers Openwall patches are installed. Changes include some extra information in the printks, and the ability to allow hard links to files you don't own which are in your group, and the ability to follow links & pipes in +t directories if they are not world-writable. This is useful for getting various daemons to run chrooted as a non-root user, and some secure drop- directory stuff.
| | Author: | Hank Leininger | | Homepage: | http://www.TheAIMSGroup.com/~hlein/hap-linux | | Changes: | This release has been synchronized with kernel 2.2.26 and Openwall 2.2.26-ow1. | | File Size: | 83941 | | Last Modified: | May 1 12:53:16 2004 |
| MD5 Checksum: | 34ec26c10bb28a3d176c85d2c7f80331 |
|
| /// File Name: |
init_rpi.txt |
Description:
|
Whitepaper detailing how to successfully patch the linux kernel in order to allow ptracing /sbin/init, and subsequently inject a connect-back shellcode into the target process. Patch code included.
| | Author: | Christophe Devine | | File Size: | 18196 | | Last Modified: | Dec 30 13:49:58 2003 |
| MD5 Checksum: | 416c6fffc2174a4c171d7edaeccba127 |
|
| /// File Name: |
ippersonality-20010724-2.4.7.tar.gz |
Description:
|
The IP Personality project is a patch to Linux 2.4 kernels that adds netfilter features: it enables the emulation of other OSes at network level, thus fooling remote OS detection tools such as nmap that rely on network fingerprinting. The characteristics that can be changed are TCP Initial Sequence Number (ISN), TCP initial window size, TCP options (their types, values and order in the packet), IP ID numbers, answers to some pathological TCP packets, and answers to some UDP packets.
| | Author: | Gael Roualland and Jean-Marc Saffroy | | Homepage: | http://ippersonality.sourceforge.net | | Changes: | This release adds new manglings to fool latest versions of nmap (2.54BETA), and has lots of code improvement. Ported to kernel v2.4.7. | | File Size: | 150069 | | Last Modified: | Jul 29 05:22:40 2001 |
| MD5 Checksum: | 47004368805cffd9ff53ac4079961c9b |
|
| /// File Name: |
ippersonality-20020427-2.4.18.tar.g..> |
Description:
|
The IP Personality project is a patch to Linux 2.4 kernels that adds netfilter features: it enables the emulation of other OSes at network level, thus fooling remote OS detection tools such as nmap that rely on network fingerprinting. The characteristics that can be changed are TCP Initial Sequence Number (ISN), TCP initial window size, TCP options (their types, values and order in the packet), IP ID numbers, answers to some pathological TCP packets, and answers to some UDP packets.
| | Author: | Gael Roualland and Jean-Marc Saffroy | | Homepage: | http://ippersonality.sourceforge.net | | Changes: | Ported to Linux 2.4.18 / iptables 1.2.2. | | File Size: | 8742 | | Last Modified: | May 27 04:41:39 2002 |
| MD5 Checksum: | 881fec3573f5810dc722bb1fd96fc970 |
|
| /// File Name: |
ld.so.1.9.2.fix |
Description:
|
Unavailable.
| | File Size: | 12194 | | Last Modified: | Aug 16 20:05:19 1999 |
| MD5 Checksum: | 5b9f30399acd3365500b6d5d5bbb604d |
|
|
|
|
|