November 1999 - openSUSE Security - openSUSE Mailing Lists

WU-FTPD vulnaribility
by Selcuk Ozturk 09 Nov '99

09 Nov '99

Is anybody from Suse reading this list at all or is this for the users to discuss things between themselves? I sent a message to support(a)suse.com about the latest CERT advisory for wu-ftpd. The response was 'please don't send any messages concerning this issue here'. They suggested 'feedback(a)suse.de' and this list here. I wrote to both and after 2 weekes not a peep. I am very disappointed in Suse. From now on, I will never purchase anything from Suse and will try to discourage anybody else from making the same mistake on any public forum I am a participant. Selcuk <=><=><=><=><=><=><=><=><=><=><=><=><=><=><=><=><=><=><=><=><=><=><=> < Selcuk Ozturk <+> > < MIS Deputy Director <+> > <=============================<#>===================================> < Phone : (301)883-2482 <+> FDCH > < Fax : (301)883-9754 <+> 1100 Mercantile Lane, Ste 119 > < E-mail : sozturk(a)fdch.com <+> Largo, MD 20774 > <=><=><=><=><=><=><=><=><=><=><=><=><=><=><=><=><=><=><=><=><=><=><=>

4 3

Certificate Revocation Lists
by Steven T. Hatton 09 Nov '99

09 Nov '99

I am attempting to design a program that can traverse a certificate revocation list(CRL). I am particularly interested in the CRL provided by Netscape. Netscape provides a signed binary stream. Does anybody have an idea as to how I can crack it open and read the CRL? TIA, Steve

1 0

umask for part of file-system?
by Rupert Koenig 08 Nov '99

08 Nov '99

hi! i'd like to have a special umask for some areas of the filesystem. Unfortunatly it seems that the command <umask> sets a mask only for the whole system. Does anybody know a way to have different permissions applyed to new files and dirs in only a sub-tree of the filesystem? The only method in know until now is running a cronjob which sets the permissions to the right form:( not very nice at all and so slow... cu LaX

2 1

Wvdial
by Bernat Ginard 05 Nov '99

05 Nov '99

Hi all, I want to use the wvdial program to connect to my ISP and I want the program to be run by regular users, but I have a problem, the program insists to change the permissions to /dev/ttyS0 (I suppose that is done by pppd not by wvdial because wvdial is not setuid but pppd is and it happens too when the program is started by a regular user), how can I remove this feature so wvdial can be run as a regular user without make it setuid root? Thanks -- Bernat Ginard Lladó mailto:bernat@kaos.es http://www.kaos.es

2 2

security-bug
by Michael Hamm 04 Nov '99

04 Nov '99

hi, I looking out for documentation of scurity-bugs in old Linux-Software (in Internet-Daemons). Thanx

2 1

[Fwd: Re: [suse-security] WU-FTPD vulnerability?]
by James Myles 01 Nov '99

01 Nov '99

Will someone (at SuSE?) please clarify this. -- Regards, James Selcuk Ozturk wrote: > > Do the 3 vulnerabilities mentioned in the CERT advisory affect SuSe 6.2? > > If so, when will there be an update? >

1 0

ftp
by Frank Dittberner 01 Nov '99

01 Nov '99

how can i disable that a user loged in with ftp to see other directories (like / ), except his home directory and the directories under them. I use wu_ftp version from suse6.2. F. Dittberner

2 1