December 2002 - openSUSE Security - openSUSE Mailing Lists

CIPE & SuSEfirewall2 Setup Help
by Jerry A! 26 Dec '02

26 Dec '02

I'm trying to use cipe for a vpn/mobile-ip setup. Everything works fine when I establish the cipe tunnel from the outside world. However, no matter how I configure SuSEfirewall2, I cannot get it to work correctly when on the internal network. Here's the error I get: Dec 26 02:34:14 xxxx kernel : SuSE-FW-ACCESS_DENIED_INT IN=eth0 OUT= MAC=xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx SRC=xxx.xxx.xxx.xxx DST=xxx.xxx.xxx.xxxx LEN=132 TOS=0x00 PREC=0x00 TTL=64 ID=6143 DF PROTO=UDP SPT=xxxxx DPT=yyyyy LEN=112 I've enabled the following: FW_SERVICES_INT_UDP="yyyyy" FW_ALLOW_INCOMING_HIGHPORTS_UDP="yes" But no dice. Could some kind soul point me to the chain/config option that controls SuSE-FW-ACCESS_DENIED_INT? Thanks in advance. --Jerry Open-Source software isn't a matter of life or death... ...It's much more important than that!

2 1

RE: [suse-security] pam_userdb database format
by Boris Kimel 24 Dec '02

24 Dec '02

Hello, This is the best way for sure. But why didn't SuSE do this? Boris Kimel. > -----Original Message----- > From: F. Martens [mailto:f.m@gmx.de] > Sent: 24 декабря 2002 г. 17:53 > To: Boris Kimel > Subject: RE: [suse-security] pam_userdb database format > > > Hello, > I changed some conditions in the makefile of pam_userdb and > recompiled under SuSE 8.0 This new pam_userdb works for me. > > Martens > > > > *********** REPLY SEPARATOR *********** > > On 24.12.2002 at 13:53 Boris Kimel wrote: > > >Hope it won't be spamming the group as I hope it would be useful. > > > >A script to create a database in dbm format (maybe I'm wrong > in naming > >the format, but as far as I know it is called DBM). Tested with SuSE > >8.1 > > > >--------- cut here ---------- > > > >#!/usr/bin/perl > >$dbmfile="vsftpd_login"; > >Check the headers for your unsubscription address > >For additional commands, e-mail: suse-security-help(a)suse.com > >Security-related bug reports go to security(a)suse.de, not here > > .... > > >

1 0

emule mit vmware und susefirewall2
by Klaus Riggart 24 Dec '02

24 Dec '02

hi leute! hab folgendes problem: unter vmware läuft auf meiner linuxkiste ein win2k mit emule. die firewall2 läßt aber keine eingehenden tcp-verbindungen auf den ports 4661-4662. hab unter vmware ein nat-netzwerk (vmnet8), sonst alles standard-konfiguration: 2 netzwerkkarten, eine mit dsl-modem die andere am lokalen netz. hab schon etliches probiert und die firewall2.config total umgebogen, hat alles nix genützt, die leitet nicht richtig weiter! .-( habt ihr das schonmal hinbekommen? bin für eure tipps dankbar, breche mir damit schon seit tagen einen ab. nice xmas, klaus hier meine ausgabe von ifconfig: eth0 Link encap:Ethernet HWaddr 00:50:BF:1D:45:CB inet addr:10.1.99.2 Bcast:10.1.99.255 Mask:255.255.255.0 inet6 addr: fe80::250:bfff:fe1d:45cb/10 Scope:Link inet6 addr: fe80::50:bf1d:45cb/10 Scope:Link UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1 RX packets:339604 errors:0 dropped:0 overruns:0 frame:0 TX packets:438344 errors:0 dropped:0 overruns:0 carrier:0 collisions:0 txqueuelen:100 RX bytes:75398680 (71.9 Mb) TX bytes:397320751 (378.9 Mb) Interrupt:10 eth1 Link encap:Ethernet HWaddr 00:50:BF:74:D1:D1 inet addr:192.168.99.1 Bcast:192.168.99.255 Mask:255.255.255.0 inet6 addr: fe80::250:bfff:fe74:d1d1/10 Scope:Link inet6 addr: fe80::50:bf74:d1d1/10 Scope:Link UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1 RX packets:386461 errors:0 dropped:0 overruns:0 frame:0 TX packets:409948 errors:0 dropped:0 overruns:0 carrier:0 collisions:229 txqueuelen:100 RX bytes:170225517 (162.3 Mb) TX bytes:71503961 (68.1 Mb) Interrupt:11 Base address:0x2000 lo Link encap:Local Loopback inet addr:127.0.0.1 Mask:255.0.0.0 inet6 addr: ::1/128 Scope:Host UP LOOPBACK RUNNING MTU:16436 Metric:1 RX packets:414230 errors:0 dropped:0 overruns:0 frame:0 TX packets:414230 errors:0 dropped:0 overruns:0 carrier:0 collisions:0 txqueuelen:0 RX bytes:49502583 (47.2 Mb) TX bytes:49502583 (47.2 Mb) ppp0 Link encap:Point-to-Point Protocol inet addr:217.xxx.xxx.xxx P-t-P:217.xxx.xxx.xxx Mask:255.255.255.255 UP POINTOPOINT RUNNING NOARP MULTICAST MTU:1492 Metric:1 RX packets:76453 errors:0 dropped:0 overruns:0 frame:0 TX packets:83009 errors:0 dropped:0 overruns:0 carrier:0 collisions:0 txqueuelen:3 RX bytes:21222715 (20.2 Mb) TX bytes:7660481 (7.3 Mb) vmnet8 Link encap:Ethernet HWaddr 00:50:56:C0:00:08 inet addr:172.16.47.1 Bcast:172.16.47.255 Mask:255.255.255.0 inet6 addr: fe80::250:56ff:fec0:8/10 Scope:Link inet6 addr: fe80::50:56c0:8/10 Scope:Link UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1 RX packets:71 errors:0 dropped:0 overruns:0 frame:0 TX packets:10 errors:0 dropped:0 overruns:0 carrier:0 collisions:0 txqueuelen:100 RX bytes:0 (0.0 b) TX bytes:0 (0.0 b) ____________________________________________________________________________ ________ Gratisproben abonnieren! Nicht nur als Geschenk eine ausgefallene Idee: Gleich HIER ausprobieren! http://www.firstcampus.de

2 1

pam_userdb database format
by Boris Kimel 24 Dec '02

24 Dec '02

Hello. Finally (yesterday) I've found a solution which made pam_userdb to be able to find, to open and use it's user database. Pam_userdb obviously needs a database in old dbm format using two database files with "dir" and "pag" extensions. The only way to create them that I found is to use a Perl script with dbmopen function. Why not recompile PAM to support new db formats? As seen from the pam_userdb source code, an attempt was made to support them, only the conditional defines there seem to be not working. Boris. -- -- -- -- -- Boris Kimel N. D. Zelinsky Institute of Organic Chemistry 47 Leninsky Prospekt, Moscow, Russia Phone1: +7 095 135-89-41 Phone2: +7 095 938-35-10 Phone3: (inside IOC) 9-80 auto secretary, please use! Fax: +7 095 135-53-28 Email: kimel(a)1303.ru -- -- -- -- --

2 2

pam_userdb database format
by Boris Kimel 23 Dec '02

23 Dec '02

Dear Sirs, Some time ago I've seen not working pam_userdb (along with cyrus or vsftpd) was discussed in suse-linux-e group with no solution being found. Facing the same problem I'd like to ask if anybody of security concerned people knows a solution. Sorry for being OT. My /var/log/messages reads as follows: (SuSE 8.1 ftp install) Dec 23 09:46:55 Budweiser pam_userdb[20033]: Verify user `user01' with password `pass01' Dec 23 09:46:55 Budweiser pam_userdb[20033]: user_lookup: could not open database `/etc/vsftpd_login' All possible (hopefully) db formats were tested. If the solution is not obvious I'll provide some more details. Yours, Boris Kimel. -- -- -- -- -- Boris Kimel N. D. Zelinsky Institute of Organic Chemistry 47 Leninsky Prospekt, Moscow, Russia Phone1: +7 095 135-89-41 Phone2: +7 095 938-35-10 Phone3: (inside IOC) 9-80 auto secretary, please use! Fax: +7 095 135-53-28 Email: kimel(a)1303.ru -- -- -- -- --

2 4

Fwd: AW: [suse-security] procmail and kmail problems
by Sebastian Schucht 23 Dec '02

23 Dec '02

Hallo I have found the solution for the kmailpreblem. On transport the mail loosing the "From xyz(a)xyz.com date ... "-row. now i write a new one in my postbox and it works fine. Mit freundlichen Grüßen \o Sebastian Schucht //\ Plattenweg 1 |\ 64823 Groß-Umstadt Tel.: 06078/8723 E-Mail: Sebastian-Schucht(a)gmx.de ---------- Weitergeleitete Nachricht ---------- Subject: AW: [suse-security] procmail and kmail problems Date: Tue, 17 Dec 2002 10:03:57 +0100 From: "Ulrich Roth" <Roth(a)impact.de> To: <suse-security(a)suse.com> > The mails will be written in my local > postbox but if I check my mails > form kmail ther are no mail in my > kmail-inbox. > > please help me with this problem. Sorry that I can't help you with that, but the funny thing is that we have the same problem here under SuSE 6.2. Maybe it's a kmail configuration problem. Maybe you just have to tell kmail to use /var/spool/mail/<username> as its inbox somewhere in the conf file. As we don't use kmail, I didn't try to solve the problem. BTW: This is OT here. Good luck! Uli -- Check the headers for your unsubscription address For additional commands, e-mail: suse-security-help(a)suse.com Security-related bug reports go to security(a)suse.de, not here -------------------------------------------------------

1 0

mysql security update?
by Telemach 23 Dec '02

23 Dec '02

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hello list, It's been almost two weeks since two vulnerabilities have been reported in the MySQL server, and several vendors have already released security updates. My question is: is the SuSE 8.0 package (mysql-3.23.48-78) also affected? It is dated on Dec 02, so before the advisory was released (I think..) http://pgp.mit.edu:11371/pks/lookup?op=get&search=0xAD674062 -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.2.1 (GNU/Linux) iD8DBQE+BwLHlDG6Z61nQGIRAtfzAJ95xbFOCw49/3QA5iwbo4LBL4Nr6gCfSVq6 VNvs6r+JSnGjSQ016OXCygw= =y4EY -----END PGP SIGNATURE-----

4 3

FW: [suse-security] pam_userdb database format
by Boris Kimel 23 Dec '02

23 Dec '02

-----Original Message----- From: Boris Kimel [mailto:webmaster@1303.ru] Sent: 23 декабря 2002 г. 18:22 To: 'Boris Kimel' Subject: RE: [suse-security] pam_userdb database format Once again about db formats. On SuSE 8.0 there is no db_load function (at least in my setup), but there is a db2_load function, which is different from that (db2_load) on SuSE 8.1. The database produced on 8.0 box has a size of 4096 kbytes, while the size was >20 kbytes on 8.1. It looks like there is a difference between boxed versions and ftp ones. I just remember mm library not working for SuSE 8.0 ftp install... Boris. -- -- -- -- -- Boris Kimel N. D. Zelinsky Institute of Organic Chemistry 47 Leninsky Prospekt, Moscow, Russia Phone1: +7 095 135-89-41 Phone2: +7 095 938-35-10 Phone3: (inside IOC) 9-80 auto secretary, please use! Fax: +7 095 135-53-28 Email: kimel(a)1303.ru -- -- -- -- --

1 0

aide
by arawak 23 Dec '02

23 Dec '02

Hi, I'm trying to run aide to check the db but this error happens ? linux:/ # aide --check -V Couldn't open file /var/lib/aide/aide.db for reading linux:/ # cd /var/lib/aide/ linux:/var/lib/aide # ll total 24172 drwx------ 2 root root 80 Dec 22 21:50 . drwxr-xr-x 36 root root 920 Dec 19 21:24 .. -rw------- 1 root root 24724849 Dec 22 22:29 aide.db What do I do to get it to read the db file? Tia Dre <arawak(a)blueyonder.co.uk>

2 2

Security hole in Ethereal?
by Ingo Doerrie 22 Dec '02

22 Dec '02

Hello! I learned from a collegue that the sniffer Ethereal shall have a security hole. Does anybody know about this? Thank you for your answer in advance. -- Freundliche Grüße kind regards Ingo

2 1