August 1999 - openSUSE Security - openSUSE Mailing Lists

AW: [suse-security] ftp-data equiv in suse?
by Michael Hamm 25 Aug '99

25 Aug '99

hi, /etc/services is just a description of serviceses and its ports. Dosent worted for much more. You have to know how FTP-Traffic is gonna be handled. If you don`t use passive-FTP, first your Client connect to an other host calling port 21. After this the strange host try to open a connection to your Client at port 20. So your IP-Chains rule have to allow strange hosts to open up connections to your Clientport 20. Seems that FTP just handled by an IP-Filter is a little bit unsecure......... greets >I noticed that SuSE doesnt have ftp-data (port 20) in /etc/services >All help for the FTP/IPCHAINS download problem on newsgroups refers to ftp-data > >Does anyone know the SuSE equiv for ftp-data? I added it to my >/etc/services and that didnt work.

3 2

Re: [suse-security] rexec-connection
by Dan 25 Aug '99

25 Aug '99

Cetin, 1. check out 'man rexec' 'man rlogin' - should give you something. 2. inetd.conf. : set the -h flag on the rshd. then all is open including superuser-commands. if you don' t want it that permissive use -l, AFAIR. man rsh and so on. 3. configure .rhosts files or /etc/hosts.equiv. 4. for more security check out kerberos, dokumented on the above man-pages. well, that' my 2p worth. good luck dan -----Ursprüngliche Nachricht----- Von: Haftaoglu, Cetin <Cetin.Haftaoglu(a)bam.de> An: Suse Security <suse-security(a)suse.com> Datum: Mittwoch, 25. August 1999 08:31 Betreff: [suse-security] rexec-connection hallo all, i have some programs which are using the rexec connection (like an X-Windows-Server or Mathematica with a remote kernel). When i try to connect i get the message 'can't open socket' or 'connection refused'. How can i enable this kind of connection and is there a security problem with the remote-exec. In the /etc/services is a port (standard) exec 512/tcp. Thanks in advance, mfG Cetin

1 0

SuSE Security Announcement
by Thomas Biege 25 Aug '99

25 Aug '99

-----BEGIN PGP SIGNED MESSAGE----- ______________________________________________________________________________ SuSE Security Announcement Package: trn-3.x and previous versions Date: Tue Aug 25 09:28:15 CEST 1999 Affected: maybe all Unix operatingsystems using trn ______________________________________________________________________________ A security hole was discovered in the package mentioned above. Please update as soon as possible or disable the service if you are using this software on your SuSE Linux installation(s). Other Linux distributions or operating systems might be affected as well, please contact your vendor for information about this issue. Please note, that that we provide this information on as "as-is" basis only. There is no warranty whatsoever and no liability for any direct, indirect or incidental damage arising from this information or the installation of the update package. _____________________________________________________________________________ 1. Problem Description The news reader trn uses a hardcoded temporary file, which resides in /tmp. 2. Impact By creating a symbolic link in /tmp, files could be overwritten, if the privileges of the user executing trn permits that operation. 3. Solution Updated the trn package from our FTP server. ______________________________________________________________________________ Here are the md5 checksums of the upgrade packages, please verify these before installing the new packages: 55cd717cfabb6ca95c5e8255c58eb514 trn-3.6-70.i386.rpm 0738e9a26aca763c2a704e76f9adedf6 trn_spl-3.6-61.i386.rpm ______________________________________________________________________________ You will find the update on our ftp-Server: ftp://ftp.suse.com/pub/suse/i386/update/6.2/n1/trn-3.6-70.i386.rpm ftp://ftp.suse.com/pub/suse/i386/update/6.2/n1/trn_spl-3.6-61.i386.rpm Webpage for patches: http://www.suse.de/patches/index.html or try the following web pages for a list of mirrors: http://www.suse.de/ftp.html http://www.suse.com/ftp_new.html ______________________________________________________________________________ SuSE has got two free security mailing list services to which any interested party may subscribe: suse-security(a)suse.com - unmoderated and for general/linux/SuSE security discussions. All SuSE security announcements are send to this list. suse-security-announce(a)suse.com - SuSE's announce-only mailing list. Only SuSE's security annoucements are sent to this list. To subscribe, send an email to majordomo(a)suse.com with the text subscribe suse-security or subscribe suse-security-announce in the body of the message. Or just issue a echo subscribe suse-security | mail majordomo(a)suse.com or echo subscribe suse-security-announce | mail majordomo(a)suse.com ______________________________________________________________________________ If you want to report *NEW* security bugs in the SuSE Linux Distribution please send an email to security(a)suse.de or call our support line. You may use pgp with the public key below to ensure confidentiality. ______________________________________________________________________________ This information is provided freely to everyone interested and may be redistributed provided that it is not altered in any way. Type Bits/KeyID Date User ID pub 2048/3D25D3D9 1999/03/06 SuSE Security Team <security(a)suse.de> - -----BEGIN PGP PUBLIC KEY BLOCK----- Version: 2.6.3i mQENAzbhLQQAAAEIAKAkXHe0lWRBXLpn38hMHy03F0I4Sszmoc8aaKJrhfhyMlOA BqvklPLE2f9UrI4Xc860gH79ZREwAgPt0pi6+SleNFLNcNFAuuHMLQOOsaMFatbz JR9i4m/lf6q929YROu5zB48rBAlcfTm+IBbijaEdnqpwGib45wE/Cfy6FAttBHQh 1Kp+r/jPbf1mYAvljUfHKuvbg8t2EIQz/5yGp+n5trn9pElfQO2cRBq8LFpf1l+U P7EKjFmlOq+Gs/fF98/dP3DfniSd78LQPq5vp8RL8nr/o2i7jkAQ33m4f1wOBWd+ cZovrKXYlXiR+Bf7m2hpZo+/sAzhd7LmAD0l09kABRG0JVN1U0UgU2VjdXJpdHkg VGVhbSA8c2VjdXJpdHlAc3VzZS5kZT6JARUDBRA24S1H5Fiyh7HKPEUBAVcOB/9b yHYji1/+4Xc2GhvXK0FSJN0MGgeXgW47yxDL7gmR4mNgjlIOUHZj0PEpVjWepOJ7 tQS3L9oP6cpj1Fj/XxuLbkp5VCQ61hpt54coQAvYrnT9rtWEGN+xmwejT1WmYmDJ xG+EGBXKr+XP69oIUl1E2JO3rXeklulgjqRKos4cdXKgyjWZ7CP9V9daRXDtje63 Om8gwSdU/nCvhdRIWp/Vwbf7Ia8iZr9OJ5YuQl0DBG4qmGDDrvImgPAFkYFzwlqo choXFQ9y0YVCV41DnR+GYhwl2qBd81T8aXhihEGPIgaw3g8gd8B5o6mPVgl+nJqI BkEYGBusiag2pS6qwznZiQEVAwUQNuEtBHey5gA9JdPZAQFtOAf+KVh939b0J94u v/kpg4xs1LthlhquhbHcKNoVTNspugiC3qMPyvSX4XcBr2PC0cVkS4Z9PY9iCfT+ x9WM96g39dAF+le2CCx7XISk9XXJ4ApEy5g4AuK7NYgAJd39PPbERgWnxjxir9g0 Ix30dS30bW39D+3NPU5Ho9TD/B7UDFvYT5AWHl3MGwo3a1RhTs6sfgL7yQ3U+mvq MkTExZb5mfN1FeaYKMopoI4VpzNVeGxQWIz67VjJHVyUlF20ekOz4kWVgsxkc8G2 saqZd6yv2EwqYTi8BDAduweP33KrQc4KDDommQNDOXxaKOeCoESIdM4p7Esdjq1o L0oixF12Cg== =pIeS - -----END PGP PUBLIC KEY BLOCK----- -----BEGIN PGP SIGNATURE----- Version: 2.6.3i Charset: noconv iQEVAwUBN8OujXey5gA9JdPZAQE6wAf/UFD/Zw9/RzYWR71taBm44rS9Lk/bLSwX w7GQLT+qWks1yq4Y8iBVtdaqTDEyx/GhKxANEMYjgrddkOuIESvF4tsY1CVo1x5y Wr/jKbTjq3kSdBRCg4gPhc0B8271zeowDYAhtOEBHEtLBfW7f1Y+7cfgSl+Ckdyh s2C4QYFP8Y2xo3k/aITlVS56IFRvmHd2Ro4BdxISavRZalK2O+Po98jjIliT604o bHZ/0yrHq6KHBaAL7DbZTGXr3M16dz7Q+E6fsfI9QjrWC/5nGahrRTIdXcdBbYsF W1sKYwzUKBOtNWEnlrPi/+Z5zZF9XX2rYOTXuh1d6bzeL28rYRlQlQ== =lfk+ -----END PGP SIGNATURE-----

2 1

I Need to build a router (THIS WEEKEND!)
by Arjen Runsink 25 Aug '99

25 Aug '99

Hello security people, I have been following this list for a while with much interest being rather a newbie to configuring a firewall/router (intermediate in configuring a linux system 'an sich'. Well, I have a problem that will arise this weekend, and to solve it I need a router with a static route (perhaps) on the outside that just allows for mounting an NT share. I need pointers and advice please. BTW, I am reading the IPCHAINS and firewall How-To at the moment, but that is a lot of material for something I can only spend a few hours on. TIA, Arjen

1 0

SuSE Security Announcement
by Thomas Biege 25 Aug '99

25 Aug '99

-----BEGIN PGP SIGNED MESSAGE----- ______________________________________________________________________________ SuSE Security Announcement Package: rsync-2.2.1 and previous Date: Tue Aug 25 07:45:15 CEST 1999 Affected: all Linux distributions using rsync ______________________________________________________________________________ A security hole was discovered in the package mentioned above. Please update as soon as possible or disable the service if you are using this software on your SuSE Linux installation(s). Other Linux distributions or operating systems might be affected as well, please contact your vendor for information about this issue. Please note, that that we provide this information on as "as-is" basis only. There is no warranty whatsoever and no liability for any direct, indirect or incidental damage arising from this information or the installation of the update package. _____________________________________________________________________________ 1. Problem Description The security breach occurs when you try to transfer an empty directory into a non-existent directory. In that case rsync sets the permissions of the working directory to those of the empty directory; this means, that the permissions of your home directory are changed to the file access mode of the empty directory if you do a remote rsync by using ssh/rsh. 2. Impact If an attacker is successful in exploiting this bug, s/he could gain access to protected files in a users home directory. This could lead to local root compromise, i.e. by modifying the PATH environment variable and smuggleing tronjan horse programs in the admins home directory or elsewhere. 3. Solution Updated the rsync package from our FTP server. ______________________________________________________________________________ Here are the md5 checksums of the upgrade packages, please verify these before installing the new packages: ca7573738420869c7750a25d53e7ac95 rsync-2.3.1-0.i386.rpm ______________________________________________________________________________ You will find the update on our ftp-Server: ftp://ftp.suse.com/pub/suse/i386/update/6.2/n1/rsync.rpm Webpage for patches: http://www.suse.de/patches/index.html or try the following web pages for a list of mirrors: http://www.suse.de/ftp.html http://www.suse.com/ftp_new.html ______________________________________________________________________________ SuSE has got two free security mailing list services to which any interested party may subscribe: suse-security(a)suse.com - unmoderated and for general/linux/SuSE security discussions. All SuSE security announcements are send to this list. suse-security-announce(a)suse.com - SuSE's announce-only mailing list. Only SuSE's security annoucements are sent to this list. To subscribe, send an email to majordomo(a)suse.com with the text subscribe suse-security or subscribe suse-security-announce in the body of the message. Or just issue a echo subscribe suse-security | mail majordomo(a)suse.com or echo subscribe suse-security-announce | mail majordomo(a)suse.com ______________________________________________________________________________ If you want to report *NEW* security bugs in the SuSE Linux Distribution please send an email to security(a)suse.de or call our support line. You may use pgp with the public key below to ensure confidentiality. ______________________________________________________________________________ This information is provided freely to everyone interested and may be redistributed provided that it is not altered in any way. Type Bits/KeyID Date User ID pub 2048/3D25D3D9 1999/03/06 SuSE Security Team <security(a)suse.de> - -----BEGIN PGP PUBLIC KEY BLOCK----- Version: 2.6.3i mQENAzbhLQQAAAEIAKAkXHe0lWRBXLpn38hMHy03F0I4Sszmoc8aaKJrhfhyMlOA BqvklPLE2f9UrI4Xc860gH79ZREwAgPt0pi6+SleNFLNcNFAuuHMLQOOsaMFatbz JR9i4m/lf6q929YROu5zB48rBAlcfTm+IBbijaEdnqpwGib45wE/Cfy6FAttBHQh 1Kp+r/jPbf1mYAvljUfHKuvbg8t2EIQz/5yGp+n5trn9pElfQO2cRBq8LFpf1l+U P7EKjFmlOq+Gs/fF98/dP3DfniSd78LQPq5vp8RL8nr/o2i7jkAQ33m4f1wOBWd+ cZovrKXYlXiR+Bf7m2hpZo+/sAzhd7LmAD0l09kABRG0JVN1U0UgU2VjdXJpdHkg VGVhbSA8c2VjdXJpdHlAc3VzZS5kZT6JARUDBRA24S1H5Fiyh7HKPEUBAVcOB/9b yHYji1/+4Xc2GhvXK0FSJN0MGgeXgW47yxDL7gmR4mNgjlIOUHZj0PEpVjWepOJ7 tQS3L9oP6cpj1Fj/XxuLbkp5VCQ61hpt54coQAvYrnT9rtWEGN+xmwejT1WmYmDJ xG+EGBXKr+XP69oIUl1E2JO3rXeklulgjqRKos4cdXKgyjWZ7CP9V9daRXDtje63 Om8gwSdU/nCvhdRIWp/Vwbf7Ia8iZr9OJ5YuQl0DBG4qmGDDrvImgPAFkYFzwlqo choXFQ9y0YVCV41DnR+GYhwl2qBd81T8aXhihEGPIgaw3g8gd8B5o6mPVgl+nJqI BkEYGBusiag2pS6qwznZiQEVAwUQNuEtBHey5gA9JdPZAQFtOAf+KVh939b0J94u v/kpg4xs1LthlhquhbHcKNoVTNspugiC3qMPyvSX4XcBr2PC0cVkS4Z9PY9iCfT+ x9WM96g39dAF+le2CCx7XISk9XXJ4ApEy5g4AuK7NYgAJd39PPbERgWnxjxir9g0 Ix30dS30bW39D+3NPU5Ho9TD/B7UDFvYT5AWHl3MGwo3a1RhTs6sfgL7yQ3U+mvq MkTExZb5mfN1FeaYKMopoI4VpzNVeGxQWIz67VjJHVyUlF20ekOz4kWVgsxkc8G2 saqZd6yv2EwqYTi8BDAduweP33KrQc4KDDommQNDOXxaKOeCoESIdM4p7Esdjq1o L0oixF12Cg== =pIeS - -----END PGP PUBLIC KEY BLOCK----- -----BEGIN PGP SIGNATURE----- Version: 2.6.3i Charset: noconv iQEVAwUBN8Oufney5gA9JdPZAQEKJgf/UTAx0yEPftIYpPU2MXLORiHlOzovg8h5 NmjcfgxPykC2Adz53CbmBNkFPyzoUy+HksLF7ugyHUnb/CQ9E1MDGPcmHItvfkBs jQ6q+3mifxSrxVjqgIg0raEg1yXF/ynv0n1GkrW5hLl7qhA/iBo7lQ6z6qtSWpFb kB4ePMVokwwL/aqUPM/Q9NPxfuMV4b4NJqRksQX4IPZGcjZ8jZpcfvoRbPbjNinq bOVBF3D1KBKd6zTgebcM8Mk+4/jRDyOdzvWvpyuqATA4+K5jHRM1WFV2JR/gd87Z Hi6C/UitemFscOQJxKriI5fBT2xDpbsSiuPKVf0cZylHyA8ZdebJzg== =5AqG -----END PGP SIGNATURE-----

1 0

SuSE Security Announcement
by Thomas Biege 25 Aug '99

25 Aug '99

-----BEGIN PGP SIGNED MESSAGE----- ______________________________________________________________________________ SuSE Security Announcement Package: netcfg-x.x.x-x Date: Tue Aug 25 07:10:09 MEST 1999 Affected: all Unix systems using auth daemon w/o resource control ______________________________________________________________________________ A security hole was discovered in the package mentioned above. Please update as soon as possible or disable the service if you are using this software on your SuSE Linux installation(s). Other Linux distributions or operating systems might be affected as well, please contact your vendor for information about this issue. Please note, that that we provide this information on as "as-is" basis only. There is no warranty whatsoever and no liability for any direct, indirect or incidental damage arising from this information or the installation of the update package. ______________________________________________________________________________ 1. Problem Description The way in.identd is started by inetd from a standard /etc/inetd.conf on a SuSE Linux distribution may be exploited to mount a Denial-of-Service attack against the system. When inetd starts in.identd with the "wait" flag and the "-w -t120" options, the in.identd will start to listen on the well known port while inetd deactivates its own listener for the time in.identd is alive. 2. Impact If many requests (say more than a hundred or so) are sent to the server at nearly the same time, in.identd will fork one child process for every request. This will eventually lead to a shortage of system resources and the computer will become unresponsive. 3. Solution To prevent the described vulnerability, change the start flag for in.identd in /etc/inetd.conf from "wait" to "nowait" and the in.identd options from "-w -t120 -e" to "-i -e". Many system administrators also decide not to run in.identd at all for security reasons, so this may a viable alternative in its own right. ______________________________________________________________________________ Webpage for patches: http://www.suse.de/patches/index.html or try the following web pages for a list of mirrors: http://www.suse.de/ftp.html http://www.suse.com/ftp_new.html ______________________________________________________________________________ SuSE has got two free security mailing list services to which any interested party may subscribe: suse-security(a)suse.com - unmoderated and for general/linux/SuSE security discussions. All SuSE security announcements are send to this list. suse-security-announce(a)suse.com - SuSE's announce-only mailing list. Only SuSE's security annoucements are sent to this list. To subscribe, send an email to majordomo(a)suse.com with the text subscribe suse-security or subscribe suse-security-announce in the body of the message. Or just issue a echo subscribe suse-security | mail majordomo(a)suse.com or echo subscribe suse-security-announce | mail majordomo(a)suse.com ______________________________________________________________________________ If you want to report *NEW* security bugs in the SuSE Linux Distribution please send an email to security(a)suse.de or call our support line. You may use pgp with the public key below to ensure confidentiality. ______________________________________________________________________________ This information is provided freely to everyone interested and may be redistributed provided that it is not altered in any way. Type Bits/KeyID Date User ID pub 2048/3D25D3D9 1999/03/06 SuSE Security Team <security(a)suse.de> - -----BEGIN PGP PUBLIC KEY BLOCK----- Version: 2.6.3i mQENAzbhLQQAAAEIAKAkXHe0lWRBXLpn38hMHy03F0I4Sszmoc8aaKJrhfhyMlOA BqvklPLE2f9UrI4Xc860gH79ZREwAgPt0pi6+SleNFLNcNFAuuHMLQOOsaMFatbz JR9i4m/lf6q929YROu5zB48rBAlcfTm+IBbijaEdnqpwGib45wE/Cfy6FAttBHQh 1Kp+r/jPbf1mYAvljUfHKuvbg8t2EIQz/5yGp+n5trn9pElfQO2cRBq8LFpf1l+U P7EKjFmlOq+Gs/fF98/dP3DfniSd78LQPq5vp8RL8nr/o2i7jkAQ33m4f1wOBWd+ cZovrKXYlXiR+Bf7m2hpZo+/sAzhd7LmAD0l09kABRG0JVN1U0UgU2VjdXJpdHkg VGVhbSA8c2VjdXJpdHlAc3VzZS5kZT6JARUDBRA24S1H5Fiyh7HKPEUBAVcOB/9b yHYji1/+4Xc2GhvXK0FSJN0MGgeXgW47yxDL7gmR4mNgjlIOUHZj0PEpVjWepOJ7 tQS3L9oP6cpj1Fj/XxuLbkp5VCQ61hpt54coQAvYrnT9rtWEGN+xmwejT1WmYmDJ xG+EGBXKr+XP69oIUl1E2JO3rXeklulgjqRKos4cdXKgyjWZ7CP9V9daRXDtje63 Om8gwSdU/nCvhdRIWp/Vwbf7Ia8iZr9OJ5YuQl0DBG4qmGDDrvImgPAFkYFzwlqo choXFQ9y0YVCV41DnR+GYhwl2qBd81T8aXhihEGPIgaw3g8gd8B5o6mPVgl+nJqI BkEYGBusiag2pS6qwznZiQEVAwUQNuEtBHey5gA9JdPZAQFtOAf+KVh939b0J94u v/kpg4xs1LthlhquhbHcKNoVTNspugiC3qMPyvSX4XcBr2PC0cVkS4Z9PY9iCfT+ x9WM96g39dAF+le2CCx7XISk9XXJ4ApEy5g4AuK7NYgAJd39PPbERgWnxjxir9g0 Ix30dS30bW39D+3NPU5Ho9TD/B7UDFvYT5AWHl3MGwo3a1RhTs6sfgL7yQ3U+mvq MkTExZb5mfN1FeaYKMopoI4VpzNVeGxQWIz67VjJHVyUlF20ekOz4kWVgsxkc8G2 saqZd6yv2EwqYTi8BDAduweP33KrQc4KDDommQNDOXxaKOeCoESIdM4p7Esdjq1o L0oixF12Cg== =pIeS - -----END PGP PUBLIC KEY BLOCK----- -----BEGIN PGP SIGNATURE----- Version: 2.6.3i Charset: noconv iQEVAwUBN8OucXey5gA9JdPZAQH3WwgAnItpIvqdYyCK/v7t97ElJAW2v7tlIYwk oACrpua5Upjer27D252KM2tnBDruSu1Vi6YG4cSQo6zkvXKE5trU3k6MCScAZAkG CXCW99sE238fpncVYv6wuuFsIUFZovxPCJEWyGTuz6+5T/BbmFOG6jk9HBqbACXl fVlJUiqpkHisJchtts2xeXsWZN4mnSC1wRcYUYVUOTkEhz24VuOdc3t8465LkAzb C9qwjB6ZEC0l1HVRibBODItnN5JLQGT4eoBDUk/jeX/92B+u/vBWgnW820lXEGWE Wx+9y/yWZN9msSazQwZYlyIO+RTYJbvn3O65G95qvfi5OMX3jIVImw== =NShh -----END PGP SIGNATURE-----

1 0

SuSE Security Announcement
by Thomas Biege 25 Aug '99

25 Aug '99

-----BEGIN PGP SIGNED MESSAGE----- ______________________________________________________________________________ SuSE Security Announcement Package: termcap-2.0.8-x Date: Tue Aug 24 20:08:11 CEST 1999 Affected: all Linux distributions using libtermcap ______________________________________________________________________________ A security hole was discovered in the package mentioned above. Please update as soon as possible or disable the service if you are using this software on your SuSE Linux installation(s). Other Linux distributions or operating systems might be affected as well, please contact your vendor for information about this issue. Please note, that that we provide this information on as "as-is" basis only. There is no warranty whatsoever and no liability for any direct, indirect or incidental damage arising from this information or the installation of the update package. _____________________________________________________________________________ 1. Problem Description A buffer overflow has been found in libtermcap's tgetent() function. If a setuid root program uses this function, the user could execute arbitrary code. SuSE Linux 6.0, 6.1 and 6.2 are not affected, since the only program using libtermcap is bc. This program is not setuid root. 2. Impact If you install a third party product, which is setuid root and linked against libtermcap, a user could use this buffer overflow to gain root privileges by supplying his own termcap file. 3. Solution Updated the termcap package from our FTP server. ______________________________________________________________________________ Here are the md5 checksums of the upgrade packages, please verify these before installing the new packages: 8a66d699a86d656f56841b2c597a8ef9 termcap-2.0.8-80.alpha.rpm 662c6bacad9e9eedfa9333afada4d338 termcap-2.0.8-80.i386.rpm (6.1) 1ccf4946caa99e0ffbed5fab6a0e768c termcap-2.0.8-80.i386.rpm (6.2) ______________________________________________________________________________ You will find the update on our ftp-Server: ftp://ftp.suse.com/pub/suse/axp/update/6.1/a1/termcap.rpm ftp://ftp.suse.com/pub/suse/i386/update/6.1/a1/termcap.rpm ftp://ftp.suse.com/pub/suse/i386/update/6.2/a1/termcap.rpm Webpage for patches: http://www.suse.de/patches/index.html or try the following web pages for a list of mirrors: http://www.suse.de/ftp.html http://www.suse.com/ftp_new.html ______________________________________________________________________________ SuSE has got two free security mailing list services to which any interested party may subscribe: suse-security(a)suse.com - unmoderated and for general/linux/SuSE security discussions. All SuSE security announcements are send to this list. suse-security-announce(a)suse.com - SuSE's announce-only mailing list. Only SuSE's security annoucements are sent to this list. To subscribe, send an email to majordomo(a)suse.com with the text subscribe suse-security or subscribe suse-security-announce in the body of the message. Or just issue a echo subscribe suse-security | mail majordomo(a)suse.com or echo subscribe suse-security-announce | mail majordomo(a)suse.com ______________________________________________________________________________ If you want to report *NEW* security bugs in the SuSE Linux Distribution please send an email to security(a)suse.de or call our support line. You may use pgp with the public key below to ensure confidentiality. ______________________________________________________________________________ This information is provided freely to everyone interested and may be redistributed provided that it is not altered in any way. Type Bits/KeyID Date User ID pub 2048/3D25D3D9 1999/03/06 SuSE Security Team <security(a)suse.de> - -----BEGIN PGP PUBLIC KEY BLOCK----- Version: 2.6.3i mQENAzbhLQQAAAEIAKAkXHe0lWRBXLpn38hMHy03F0I4Sszmoc8aaKJrhfhyMlOA BqvklPLE2f9UrI4Xc860gH79ZREwAgPt0pi6+SleNFLNcNFAuuHMLQOOsaMFatbz JR9i4m/lf6q929YROu5zB48rBAlcfTm+IBbijaEdnqpwGib45wE/Cfy6FAttBHQh 1Kp+r/jPbf1mYAvljUfHKuvbg8t2EIQz/5yGp+n5trn9pElfQO2cRBq8LFpf1l+U P7EKjFmlOq+Gs/fF98/dP3DfniSd78LQPq5vp8RL8nr/o2i7jkAQ33m4f1wOBWd+ cZovrKXYlXiR+Bf7m2hpZo+/sAzhd7LmAD0l09kABRG0JVN1U0UgU2VjdXJpdHkg VGVhbSA8c2VjdXJpdHlAc3VzZS5kZT6JARUDBRA24S1H5Fiyh7HKPEUBAVcOB/9b yHYji1/+4Xc2GhvXK0FSJN0MGgeXgW47yxDL7gmR4mNgjlIOUHZj0PEpVjWepOJ7 tQS3L9oP6cpj1Fj/XxuLbkp5VCQ61hpt54coQAvYrnT9rtWEGN+xmwejT1WmYmDJ xG+EGBXKr+XP69oIUl1E2JO3rXeklulgjqRKos4cdXKgyjWZ7CP9V9daRXDtje63 Om8gwSdU/nCvhdRIWp/Vwbf7Ia8iZr9OJ5YuQl0DBG4qmGDDrvImgPAFkYFzwlqo choXFQ9y0YVCV41DnR+GYhwl2qBd81T8aXhihEGPIgaw3g8gd8B5o6mPVgl+nJqI BkEYGBusiag2pS6qwznZiQEVAwUQNuEtBHey5gA9JdPZAQFtOAf+KVh939b0J94u v/kpg4xs1LthlhquhbHcKNoVTNspugiC3qMPyvSX4XcBr2PC0cVkS4Z9PY9iCfT+ x9WM96g39dAF+le2CCx7XISk9XXJ4ApEy5g4AuK7NYgAJd39PPbERgWnxjxir9g0 Ix30dS30bW39D+3NPU5Ho9TD/B7UDFvYT5AWHl3MGwo3a1RhTs6sfgL7yQ3U+mvq MkTExZb5mfN1FeaYKMopoI4VpzNVeGxQWIz67VjJHVyUlF20ekOz4kWVgsxkc8G2 saqZd6yv2EwqYTi8BDAduweP33KrQc4KDDommQNDOXxaKOeCoESIdM4p7Esdjq1o L0oixF12Cg== =pIeS - -----END PGP PUBLIC KEY BLOCK----- -----BEGIN PGP SIGNATURE----- Version: 2.6.3i Charset: noconv iQEVAwUBN8OuWney5gA9JdPZAQGxDAf/Tsq5i2wosadmUu63+EDNUccfGd1NtjOZ kqHr7zmXDipJDX1dzCf/hdPqepP+/eNg2OTrdSq58ZldykWMZtRmnt0CnQ6IBMnl RoBjJhrnAm6WFSN6qMKr8oj0McKde0CC7emy6qhf5ZYsLKmYYuCoSkUF+DkpMTTv iRXzmjZ3FPX44sa9F8yZz+c7zxiUOfbG+S7DL4MTfQBPOy8cq/0HffPe3xRvyD7s k2OIoMUZMd/TmoaNuA/gS16AEbm2fV+Hfk0iU+LIiQJhg0uEf5erMKEDLEEsc0Oa HzBNqw0BNXZAnD++XpNiJXLLJ/asZ2gEQWKOdjm60bxxgyxCgEuF0A== =dHze -----END PGP SIGNATURE-----

1 0

rexec-connection
by Haftaoglu, Cetin 25 Aug '99

25 Aug '99

hallo all, i have some programs which are using the rexec connection (like an X-Windows-Server or Mathematica with a remote kernel). When i try to connect i get the message 'can't open socket' or 'connection refused'. How can i enable this kind of connection and is there a security problem with the remote-exec. In the /etc/services is a port (standard) exec 512/tcp. Thanks in advance, mfG Cetin

1 0

ftp-data equiv in suse?
by Chrissy LeMaire 25 Aug '99

25 Aug '99

hello all, I noticed that SuSE doesnt have ftp-data (port 20) in /etc/services All help for the FTP/IPCHAINS download problem on newsgroups refers to ftp-data Does anyone know the SuSE equiv for ftp-data? I added it to my /etc/services and that didnt work. Thanks

3 3

Re: [suse-security] Securing a Firewall
by Mark Lutz 24 Aug '99

24 Aug '99

* Moonshi Mohsenruddin <moonshi(a)linux.com.sg> writes: > Is someone working on HOWTOs to setup a secure SuSE 6.x Linux > firewall? The "6.x" is the problem. SuSE 6.0 uses Kernel 2.0.36 and therefore "ipfwadm". SuSE 6.1 uses Kernel 2.2.5 und therefore "ipchains" for firewalling. You should read all the relevant information, e.g., "/usr/doc/packages/firewall/Firewall-Mini-Howto.txt" "/usr/doc/packages/ipchains/HOWTO.txt" There are also man and info pages, e.g., "man ipfwadm", "info ipchains" There is also a German "Firewall Handbuch fuer Linux 2.0 und 2.2" online available (e.g., as a .pdf file) under GPL. <http://www.little-idiot.de/firewall/> BTW: The paragraph describing the SuSE firewall doesn't sound too good. Actually it sounds pretty bad. Hi SuSE people, did you hear that? > If there are documentations for this, can someone pls post the urls/links > of the idiot-proof documentations? It's German: <http://www.little-idiot.de/firewall/firewall2pdf.zip> > - -- PS: Please separate your signature using "-- " (minus, minus, space) and quote only the relevant line/s. Add your comments below the quoted line/s. Just in case ;-) -- Mark Lutz Accept German and English

2 1