.:[ packet storm ]:.
                           
all things security
all things security

 Section:  .. / UNIX / patches  /

Page 4 of 6
<< 1 2 3 4 5 6 >> Files 75 - 100 of 133
Currently sorted by: Last ModifiedSort By: File Name, File Size

 ///  File Name: pspa-2.4.10-9.tar.gz
Description:
The Linux Port/Socket Pseudo ACLs project is a patch to Linux kernel v2.4 which allows the admin to delegate privileges for some protected network resources to non-root users. The ACLs are generally used to run untrusted or insecure applications as an unprivileged process, thereby lessening the impact of some undiscovered denial of service or root compromise. The ACLs can cover protected ports, raw sockets, and packet sockets.
Homepage:http://original.killa.net/infosec/acls
Changes:Ported to kernel v2.4.10, some bugs were fixed, and a "make config" warning when packet socket is modular has been added.
File Size:5614
Last Modified:Sep 27 01:25:05 2001
MD5 Checksum:99b0fe735c0465b02dbca45959674732

 ///  File Name: pspa-2.4.9-6.tar.gz
Description:
The Linux Port/Socket Pseudo ACLs project is a patch to Linux kernel v2.4 which allows the admin to delegate privileges for some protected network resources to non-root users. The ACLs are generally used to run untrusted or insecure applications as an unprivileged process, thereby lessening the impact of some undiscovered denial of service or root compromise. The ACLs can cover protected ports, raw sockets, and packet sockets.
Homepage:http://original.killa.net/infosec/acls
Changes:Kernel 2.4.9 is supported.
File Size:5503
Last Modified:Aug 17 19:27:41 2001
MD5 Checksum:c4d3d6221bf3d0b6df18ae41d59f4441

 ///  File Name: ippersonality-20010724-2.4.7.tar.gz
Description:
The IP Personality project is a patch to Linux 2.4 kernels that adds netfilter features: it enables the emulation of other OSes at network level, thus fooling remote OS detection tools such as nmap that rely on network fingerprinting. The characteristics that can be changed are TCP Initial Sequence Number (ISN), TCP initial window size, TCP options (their types, values and order in the packet), IP ID numbers, answers to some pathological TCP packets, and answers to some UDP packets.
Author:Gael Roualland and Jean-Marc Saffroy
Homepage:http://ippersonality.sourceforge.net
Changes:This release adds new manglings to fool latest versions of nmap (2.54BETA), and has lots of code improvement. Ported to kernel v2.4.7.
File Size:150069
Last Modified:Jul 29 05:22:40 2001
MD5 Checksum:47004368805cffd9ff53ac4079961c9b

 ///  File Name: rpcinfo-diff
Description:
rpcinfo-diff is a patch for the netkit version 0.17 rpc package, allowing a target port to be set for rpcinfo. This is useful for targeting older sun machines, which run rpcbind on a udp port greater than 32770.
Author:Spaceork
Homepage:http://www.dhp.com/~spaceork
File Size:2382
Last Modified:Jul 19 19:50:49 2001
MD5 Checksum:fea8d8026f341ea193f4024849a66861

 ///  File Name: tcsh-bofh-6.10-0.0.1.tar.gz
Description:
Tcsh-bofh is a patch to provide true BOFH log functions to tcsh 6.10. Features the ability to log all commands to syslog.
Author:EF
Homepage:http://www.ccitt5.net
Changes:Loglevel and logfacility configurable through --with-bofh-loglevel and --with-bofh-logfacility. split-userlog utility included to split the generated logfile into $USERNAME.log files for each user.
File Size:6736
Last Modified:May 30 14:50:03 2001
MD5 Checksum:e76964a6bf0144666179eca94ef2623d

 ///  File Name: bash-bofh-2.05-0.0.1.tar.gz
Description:
Bash-bofh is a patch to provide true BOFH log functions to bash 2.05. Features the ability to log all commands to syslog.
Author:EF
Homepage:http://www.ccitt5.net
Changes:Loglevel and logfacility configurable through --with-bofh-loglevel and --with-bofh-logfacility. split-userlog utility included to split the generated logfile into $USERNAME.log files for each user.
File Size:18361
Last Modified:May 30 14:48:31 2001
MD5 Checksum:c12e922de63d450b15d2e26d2987beb2

 ///  File Name: hap-linux-2.2.19-3.diff.gz
Description:
HAP-Linux is a collection of security related patches which are designed to be applied after Solar Designers Openwall patches are installed. Changes include some extra information in the printks, and the ability to allow hard links to files you don't own which are in your group, and the ability to follow links & pipes in +t directories iff they are not world-writable. This is useful for getting various daemons to run chrooted as a non-root user, and some secure drop- directory stuff.
Homepage:http://www.doutlets.com/downloadables/hap.phtml
Changes:A fix for a compile bug on non-x86 platforms, and a fix for weakening hardlink restrictions when CONFIG_SECURE_NOTSOMUCH is enabled.
File Size:12838
Last Modified:May 8 19:29:13 2001
MD5 Checksum:4e90fc9810ee92e68a3b4af18b6dd0b1

 ///  File Name: openssh-2.5.2p2+SecurID_v1.patch.gz
Description:
This patch integrates SecurID authentication services directly into the OpenSSH daemon, allowing users to use SecurID tokens directly as their passwords instead of relying on the clunky sdshell.
Homepage:http://www.omniti.com/~jesus/projects
Changes:This release includes fixes for next token handling code. The patch is for OpenSSH 2.5.2p2.
File Size:26678
Last Modified:Apr 24 21:22:14 2001
MD5 Checksum:82009d8962cffb0484ca6ba6fb992261

 ///  File Name: MSEC.single-user.patch.pkg.sit
Description:
The MSEC single-user patch disables the ability to boot into single-user mode under OS X. If this patch is not applied then anyone with physical access to the Mac OS X machine can gain root access easily by holding down the command and s keys at startup. The patch disables this by installing a modified version of /sbin/mach_init. The patch does NOT backup the insecure version of /sbin/mach_init so if for some strange reason you want to revert to the insecure copy of mach_init you must restore that file from your own backups. If you have any questions check our website at http://www.msec.net or email support[at]msec.net.
Author:Marukka Der Inhaber
Homepage:http://www.msec.net
File Size:54251
Last Modified:Apr 24 20:33:05 2001
MD5 Checksum:0baf8d8626527794ad26e2e0ee0aa5ce

 ///  File Name: linux-2.2.19-sf1.tar.gz
Description:
Linux Kernel Patch from the segfault.net project - This patch for kernel v2.2.19 allows you to specify GID's which are allowed to bind to each interface. This patch could be very useful for shell providers or admins who wants to restrict the using of more interfaces.
Author:Andi
Homepage:http://segfault.net
File Size:7446
Last Modified:Apr 16 20:52:27 2001
MD5 Checksum:32dfda21cd473387d033e608e02230ed

 ///  File Name: res.c.diff
Description:
Patch to the UnrealIRCD v3.1.1 which fixes a bug allowing users to dump the DNS cache, defeating hostname masking.
Author:Ph3wl
File Size:802
Last Modified:Apr 9 01:35:20 2001
MD5 Checksum:93cdba367c2fddcdc787ef24333d8ac4

 ///  File Name: rfc1323.patch
Description:
OpenBSD 2.7/2.8 patch which causes the timestamp to start at 0 for each connection, confusing nmap's remote uptime guess.
Author:Ted
Homepage:http://heorot.stanford.edu/
File Size:3384
Last Modified:Mar 16 21:45:03 2001
MD5 Checksum:6c0dbc55eb5d6004e4bf7a83b0a3ed7e

 ///  File Name: hap-linux-2.0.38-5.diff.gz
Description:
HAP-Linux is a collection of security related patches which are designed to be applied after Solar Designers Openwall patches are installed. Changes include some extra information in the printks, and the ability to allow hard links to files you don't own which are in your group, and the ability to follow links & pipes in +t directories iff they are not world-writable. This is useful for getting various daemons to run chrooted as a non-root user, and some secure drop- directory stuff.
Homepage:http://www.doutlets.com/downloadables/hap.phtml
Changes:Minor security fixes - ioctl protections in chroot, and other bug fixes.
File Size:10959
Last Modified:Feb 21 17:12:19 2001
MD5 Checksum:e3fe345fa59e5f5835a785154ce25880

 ///  File Name: hap-linux-2.2.18-4.diff.gz
Description:
HAP-Linux is a collection of security related patches which are designed to be applied after Solar Designers Openwall patches are installed. Changes include some extra information in the printks, and the ability to allow hard links to files you don't own which are in your group, and the ability to follow links & pipes in +t directories iff they are not world-writable. This is useful for getting various daemons to run chrooted as a non-root user, and some secure drop- directory stuff.
Homepage:http://www.doutlets.com/downloadables/hap.phtml
Changes:Minor security fixes - ioctl protections in chroot, and other bug fixes.
File Size:11930
Last Modified:Feb 21 17:10:43 2001
MD5 Checksum:bec6b72aff70d0ac802b89a593af4ea5

 ///  File Name: hap-linux-2.2.18-2.diff.gz
Description:
HAP-Linux is a collection of security related patches which are designed to be applied after Solar Designers Openwall patches are installed. Changes include some extra information in the printks, and the ability to allow hard links to files you don't own which are in your group, and the ability to follow links & pipes in +t directories iff they are not world-writable. This is useful for getting various daemons to run chrooted as a non-root user, and some secure drop- directory stuff.
Homepage:http://www.doutlets.com/downloadables/hap.phtml
File Size:11346
Last Modified:Feb 6 15:39:45 2001
MD5 Checksum:631921ff0e6e194844a7b3caa0221aff

 ///  File Name: ctk-adm-dns-chroot-0.2.tar.bz2
Description:
Ctk-adm-dns-chroot creates the minimum file structure needed to run bind as a chrooted unprivileged user.
Homepage:http://sourceforge.net/projects/ctk-dns-chroot
Changes:More transparent chroot installation without compromising security.
File Size:16838
Last Modified:Jan 15 01:58:48 2001
MD5 Checksum:2b36125f9267efe8187df25aeff81bc1

 ///  File Name: gnupg-1.0.4.security-patch1.diff
Description:
Patch for GnuPG v1.04 to fix the signature verification vulnerability which can easily lead to false positives.
Homepage:http://www.gnupg.org
File Size:4961
Last Modified:Dec 22 00:33:59 2000
MD5 Checksum:5ecf97501eeaa8b8feef1d0a63747657

 ///  File Name: ftpd.c
Description:
OpenBSD ftpd unofficial patch - The patch released to remedy the problem with the 1 byte overflow problem was junk, to remedy i recoded the original ftpd.c file with the fix. This takes the bite out of fixing this problem. Replace the original ftpd.c with this and recompile.
Author:Malicious Code
Homepage:http://www.teamvirus.net
File Size:62388
Last Modified:Dec 21 18:29:15 2000
MD5 Checksum:f71cc0a7ea0094aedbc7e4ade631f83e

 ///  File Name: bind-8.2.2-P7-chaos1.diff
Description:
Bind-8.2.2P7 patch which logs all bind version requests to syslog.
Author:Sean Trifero
Homepage:http://www.innu.org/~sean
Changes:Ported to Bind-8.2.2P7.
File Size:521
Last Modified:Dec 20 16:04:31 2000
MD5 Checksum:0be1595096a5e37439f518e8d4ead676

 ///  File Name: linux-2.2.18-stealth1.diff
Description:
The Stealth Kernel Patch for Linux v2.2.18 makes the linux kernel discard the packets that many OS detection tools use to query the TCP/IP stack. Includes logging of the dropped query packets and packets with bogus flags. Does a very good job of confusing nmap and queso.
Author:Sean Trifero
Homepage:http://www.innu.org/~sean
Changes:Fixed 2.2->2.4 connectivity problems and ported to kernel 2.2.18.
File Size:17836
Last Modified:Dec 20 16:03:03 2000
MD5 Checksum:a0a77e93859e7bd2b2dba329fc459516

 ///  File Name: rna.tar.gz
Description:
RNA (Resources Not for All) is a collection of security improvements for FreeBSD 4.0-Release. Features a restricted kernel process table, restricted /proc filesystem, and restricted who/w/last.
Author:Yeti
Homepage:ftp://ftp.eth-security.net/pub
File Size:8063
Last Modified:Oct 4 20:45:52 2000
MD5 Checksum:96d3a6af33fdf84af236852660f29026

 ///  File Name: longdate.fix.txt
Description:
Instructions for Sendmail and Postfix to stop messages with long Date: headers.
Author:Koos van den Hout and Mark Lastdrager.
File Size:2331
Last Modified:Jul 24 23:02:56 2000
MD5 Checksum:7ed0c8340998a6071f42c7cd6a464fde

 ///  File Name: bind-8.2.2-P5-chaos1.diff
Description:
Bind-8.2.2P5 patch which logs all bind version requests to syslog.
Author:Sean Trifero
Homepage:http://www.innu.org/~sean
File Size:519
Last Modified:Jul 21 23:46:03 2000
MD5 Checksum:e8d661d58760ffa8b18fd8fad4be0a50

 ///  File Name: sirc.tar.gz
Description:
Secure BitchX - Patches and instructions which allow you to run BitchX in a chrooted environment.
Author:Naif
Homepage:http://naif.itapac.net
File Size:6326
Last Modified:Jul 6 18:58:04 2000
MD5 Checksum:c8ad597782ee4728a4d1411ced349cdf

 ///  File Name: bash.security.patch.tgz
Description:
Patch for Bash 2.02 and 2.03 which will log all user commands to /var/log/histories/(name), Disallow and log execution attempts when uid != euid, and sets a limit on the highest UID that can run the shell.
Author:Odin
Homepage:http://ojnk.sourceforge.net
File Size:12774
Last Modified:Jul 4 00:02:42 2000
MD5 Checksum:b45e2f1613f3e75e1a411ddde2bafe41