aboutsummaryrefslogtreecommitdiff
path: root/security
Commit message (Collapse)AuthorAgeFilesLines
* This package implements an algorithm for breaking the PkZip cipher that wasRenato Botelho2005-07-284-0/+77
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | devised by Eli Biham and Paul Kocher. This program applies a known plaintext attack to an encrypted file. A known-plaintext-attack recovers a password using the encrypted file and (part of) the unencrypted file. Please note that cryptographers use the word 'plaintext' for any kind of unencrypted data - not necessarily readable ASCII text. Before you ask why somebody may want to know the password when he already knows the plaintext think of the following situations: - Usually there's a large number of files in a ZIP-archive. Usually all these files are encrypted using the same password. So if you know one of the files, you can recover the password and decrypt the other files. - You need to know only a part of the plaintext (at least 13 bytes). Many files have commonly known headers, like DOS .EXE-files. Knowing a reasonably long header you can recover the password and decrypt the entire file. WWW: http://www.unix-ag.uni-kl.de/~conrad/krypto/pkcrack.html PR: ports/84192 Submitted by: Emanuel Haupt <ehaupt@critical.ch> Notes: svn path=/head/; revision=140301
* - Fix apache 2.1 range for CAN-2005-2088 entry which prevents apache 2.0 fromClement Laforet2005-07-281-1/+4
| | | | | | | | | | upgrading. Pointyhat to: clement, remko Reviewed by: erwin Notes: svn path=/head/; revision=140296
* Update to 0.7.9.Joe Marcus Clarke2005-07-284-12/+16
| | | | Notes: svn path=/head/; revision=140278
* Mark apache+mod_ssl-1.3.33+2.8.22_1 as not vulnerable in the latest Apache ↵Remko Lodder2005-07-281-1/+2
| | | | | | | entry. Notes: svn path=/head/; revision=140275
* Patch MASTER_SITE since they seem to redirect to a second one sometimesJames E. Housley2005-07-271-1/+2
| | | | Notes: svn path=/head/; revision=140266
* - Fix startup script for milterSergey Matveychuk2005-07-272-2/+3
| | | | | | | | | PR: ports/84104 Submitted by: maintainer Reported by: Erin Fortenberry <kahn@deadbbs.com> Notes: svn path=/head/; revision=140261
* There must be an curse. s/il/li/.Remko Lodder2005-07-271-7/+7
| | | | | | | Noticed by: nectar Notes: svn path=/head/; revision=140260
* Update my latest Apache entry to make clear that this only affects certainRemko Lodder2005-07-271-1/+12
| | | | | | | | | | | installations (when Apache is used as a HTTP proxy in combination with some web servers). I didn't make that clear in the first commit. Requested by: nectar Discussed with: clement Notes: svn path=/head/; revision=140252
* update to DAT 4544James E. Housley2005-07-272-3/+3
| | | | Notes: svn path=/head/; revision=140247
* Document apache -- http request smuggling.Remko Lodder2005-07-271-0/+64
| | | | | | | | Requested by: clement Glanced at by: clement Notes: svn path=/head/; revision=140244
* Add courierpasswd, a user authentication and password changing utilityAde Lovett2005-07-275-0/+56
| | | | | | | for the courier imap/pop3 system. Notes: svn path=/head/; revision=140212
* - Update to 1.7Michael Johnson2005-07-272-3/+3
| | | | | | | | PR: ports/84149 Submitted by: maintainer Notes: svn path=/head/; revision=140200
* - Update to 1.2.8Pav Lucistnik2005-07-263-15/+6
| | | | | | | | | PR: ports/84074 Submitted by: Andrej Zverev <az@inec.ru> Approved by: Keith J. Jones <kjones@realdigitalforensics.com> (maintainer) Notes: svn path=/head/; revision=140197
* Fix URL of project web site.Stefan Eßer2005-07-261-1/+1
| | | | | | | Submitted by: Dru Lavigne via Dan Langille Notes: svn path=/head/; revision=140183
* Update to DAT 4543James E. Housley2005-07-262-3/+3
| | | | Notes: svn path=/head/; revision=140182
* TLSWrap is a TLS/SSL FTP wrapper/proxy for UNIX and Windows, allowing you toRenato Botelho2005-07-264-0/+49
| | | | | | | | | | | | | use your favourite FTP client with any TLS/SSL-enabled FTP server. WWW: http://tlswrap.sunsite.dk/ PR: ports/84028 Submitted by: Daniel J. O'Connor <darius@dons.net.au> Thanks to: novel Notes: svn path=/head/; revision=140174
* New port: YersiniaStefan Eßer2005-07-268-0/+386
| | | | | | | | | | | | | | | | Yersinia is a layer 2 vulnerability scanner with support for the following protocols: - Cisco Discovery Protocol (CDP) - Dynamic Host Configuration Protocol (DHCP) - Dynamic Trunking Protocol (DTP) - Hot Standby Router Protocol (HSRP) - IEEE 802.1q - Spanning Tree Protocol (STP, RSTP) - Virtual Trunking Protocol (VTP) Notes: svn path=/head/; revision=140170
* BSDsfv is a flexible and highly compatible SFV checksum utility.Renato Botelho2005-07-264-0/+52
| | | | | | | | | | | | | | | | | | | | | Features: - create SFV files, verify downloaded single files or whole releases - add banners to your SFV files - very flexible and compatible with all other SFV tools currently known, including SFVNIX compatibility mode concerning SFV files created - easy to console application - plug & play support for glFTPd and other demons including count-missing-files feature for race scripts WWW: http://bsdsfv.sourceforge.net/ PR: ports/84108 Submitted by: Emanuel Haupt <ehaupt@critical.ch> Approved by: flz (mentor) Notes: svn path=/head/; revision=140168
* This utility creates .SFV (Simple File Verify) and .PAR (Parity Archive) dataRenato Botelho2005-07-264-0/+56
| | | | | | | | | | | | | | | | | | | | | | files. Features: * Recursive directories handling * Automatic checksum file naming ability in create mode * Meaningful and documented exit values for easy scripting * Wildcards for file names * Creation of PAR (Parity Archive) files * Create Multiple recovery sets if number of files in SFV greater than 255 WWW: http://pure-sfv.sourceforge.net/ PR: ports/84127 Submitted by: Emanuel Haupt <ehaupt@critical.ch> Approved by: flz (mentor) Notes: svn path=/head/; revision=140166
* Set modified date in entry for previous commit.Erwin Lansing2005-07-261-0/+1
| | | | | | | Cluebat swung by: simon Notes: svn path=/head/; revision=140153
* Note that the fd_set vulnerability in net/bld was fixed in 0.3.3Erwin Lansing2005-07-261-1/+4
| | | | | | | | Prodded by: garga Glanced at by: remko Notes: svn path=/head/; revision=140140
* Document clamav -- multiple remote buffer overflows.Hiroki Sato2005-07-251-0/+46
| | | | Notes: svn path=/head/; revision=140099
* - Update to 0.86.2Sergey Matveychuk2005-07-252-3/+3
| | | | | | | | | PR: ports/84038 Submitted by: dawnshade <h-k@mail.ru> Approved by: maintainer Notes: svn path=/head/; revision=140082
* Update to 4541James E. Housley2005-07-252-3/+3
| | | | Notes: svn path=/head/; revision=140073
* Don't overwrite installed aide.conf by using -f FILENorikatsu Shigemura2005-07-231-1/+1
| | | | | | | | | | | instead of -d FILE. Damaged by: ume Wept by: ume Approved by: maintainer slience Notes: svn path=/head/; revision=139988
* Update to 2.2.5.Jeremy Messenger2005-07-239-1081/+95
| | | | | | | | PR: ports/83927 Submitted by: Udo Schweigert <udo.schweigert@siemens.com> (maintainer) Notes: svn path=/head/; revision=139987
* update to 0.57Oliver Lehmann2005-07-234-31/+63
| | | | Notes: svn path=/head/; revision=139973
* - update distinfoYen-Ming Lee2005-07-231-2/+2
| | | | | | | | | | (I compared the new distfile with the old one. The author didn't change anything, just repacked the distfile) Noticed by: kris Notes: svn path=/head/; revision=139965
* - Document isc-dhcpd -- format string vulnerabilities (olderSimon L. B. Nielsen2005-07-231-1/+37
| | | | | | | | | | vulnerabilty). [1] - Use standard title format for latest egroupware entry. Reminded by: Panagiotis Christias [1] Notes: svn path=/head/; revision=139955
* This port is scheduled for deletion on 2005-09-22 if it is still brokenKris Kennaway2005-07-231-0/+2
| | | | | | | at that time and no PRs have been submitted to fix it. Notes: svn path=/head/; revision=139936
* Add entry for eGroupWare's recent vulnerabilities.Jun Kuriyama2005-07-231-0/+31
| | | | Notes: svn path=/head/; revision=139932
* Document denial of service attack in fetchmail 6.5.2.1.Simon Barner2005-07-221-0/+30
| | | | | | | | Reported by: Matthias Andree <matthias.andree@gmx.de> Reviewed by: simon Notes: svn path=/head/; revision=139883
* Update my email address.Vsevolod Stakhov2005-07-227-7/+7
| | | | | | | Approved by: perky (mentor) Notes: svn path=/head/; revision=139880
* Update phppgadmin entry to note that it was fixed in 3.5.4 and add aSimon L. B. Nielsen2005-07-211-1/+4
| | | | | | | | | few references while here anyway. Prodded by: Tobias Roth (I think :-) ) Notes: svn path=/head/; revision=139847
* Change MASTERSITE from ~renato to ~garga because I change my accountRenato Botelho2005-07-211-1/+1
| | | | | | | | | here Approved by: flz (mentor) Notes: svn path=/head/; revision=139835
* Document dnrd -- remote buffer and stack overflow vulnerabilities.Simon L. B. Nielsen2005-07-211-0/+33
| | | | Notes: svn path=/head/; revision=139829
* Fix typo in last commitSimon L. B. Nielsen2005-07-211-1/+1
| | | | | | | Noticed by: Matthias Andree <matthias.andree@gmx.de> Notes: svn path=/head/; revision=139821
* Add more references to latest fetchmail entry [1] and sort referencesSimon L. B. Nielsen2005-07-211-1/+4
| | | | | | | | | while here anyway. Submitted by: Matthias Andree <matthias.andree@gmx.de> [1] Notes: svn path=/head/; revision=139811
* - Fix a bug in SHA256Sergey Matveychuk2005-07-212-0/+12
| | | | | | | | | PR: ports/76289 Reported by: Kenichi Morioka <morioka@openloop.co.jp> Fixed by: Vsevolod Stakhov <vsevolod@highsecure.ru> (maintainer) Notes: svn path=/head/; revision=139808
* - Update to 1.3.5Pav Lucistnik2005-07-215-44/+10
| | | | | | | | PR: ports/83823 Submitted by: Travis Poppe <tlp@liquidx.org> Notes: svn path=/head/; revision=139803
* Document an issue with the LDAP backend provided by PowerDNS.Tom Rhodes2005-07-211-0/+30
| | | | Notes: svn path=/head/; revision=139798
* BROKEN on !i386: Does not compileKris Kennaway2005-07-201-0/+4
| | | | Notes: svn path=/head/; revision=139748
* Document fetchmail -- remote root/code injection from malicious POP3Simon L. B. Nielsen2005-07-201-0/+28
| | | | | | | | | server. Submitted by: Matthias Andree <matthias.andree@gmx.de> Notes: svn path=/head/; revision=139736
* Bridge betwean ClamAV antivirus software and Squid caching proxy.Renato Botelho2005-07-206-0/+129
| | | | | | | | | | | | | | | Squidclam is a replacement for SquidClamAV-Redirector.py written in C using libclamav and libcurl Author: squidclam@users.sourceforge.net WWW: http://sourceforge.net/projects/squidclam/ PR: ports/82652 Submitted by: Alexander Novitsky <alecn2002@yandex.ru> Approved by: flz (mentor) Notes: svn path=/head/; revision=139724
* s/freebsd.org/FreeBSD.org/Joe Marcus Clarke2005-07-201-1/+1
| | | | | | | Reported by: oliver Notes: svn path=/head/; revision=139722
* - Revive security/ruby-acl port and unbreak itPav Lucistnik2005-07-206-0/+82
| | | | | | | | | | - Reset maintainership PR: ports/76917 Submitted by: IWATSUKI Hiroyuki <don@na.rim.or.jp> Notes: svn path=/head/; revision=139685
* - Fix plist and unbreak [1, 2]Pav Lucistnik2005-07-204-17/+20
| | | | | | | | | | | | - Clean up Makefile and update pkg-message handling PR: ports/81492 [1], ports/83128 [2] Submitted by: Boris B. Samorodov <bsam@ipt.ru>, Norikatsu Shigemura <n-shigemura@ensure.jp> Approved by: maintainer timeout (2 months) Notes: svn path=/head/; revision=139684
* - Update to 2.0.8Pav Lucistnik2005-07-209-6/+12
| | | | | | | | PR: ports/83679 Submitted by: vadim@vk.crocodile.org <vadim@vk.crocodile.org> (maintainer) Notes: svn path=/head/; revision=139651
* - Update to 2.0.8Pav Lucistnik2005-07-209-9/+12
| | | | | | | | PR: ports/83678 Submitted by: vadim@vk.crocodile.org <vadim@vk.crocodile.org> (maintainer) Notes: svn path=/head/; revision=139650
* - Update to 1.1Pav Lucistnik2005-07-193-4/+7
| | | | | | | | PR: ports/83741 Submitted by: Marcus Grando <marcus@corp.grupos.com.br> Notes: svn path=/head/; revision=139613