November 2000 - openSUSE Security - openSUSE Mailing Lists

same ip for two interfaces
by Bauer, Juergen 02 Nov '00

02 Nov '00

hi folks, can somebody see a (security) problem in assigning the external and the dmz interface the same IP-Address ? all the ipchains rules are using the interface switch (-i). thanx, jb

2 1

setuid query
by Maciej Chodzko-Zajko 02 Nov '00

02 Nov '00

I have a strange problem that occurs only on SuSE, but not on RedHat. We have a java application that runs setuid. In order for this to work, the following scenario is followed : script1 run by user, this then calls the jre and the first part of the java application, which then calls prog1 prog1 has setuid and setgid - this then calls script 2 (usually as the owner of this program) script2 on all other systems, gets executed in setuid mode (ie as owner of prog1) On our SuSE system, script2 is not executed with setuid, we have managed to drop out somehow. Now, the id for the owner of the program is 500, group is 101, so this should be above any "setuid limit". I have exactly the same user/group id definitions on my RedHat box and do NOT get this problem. Any ideas ? Maciej Chodzko-Zajko MERANT Answerline Product Manager Email: Maciej(a)Merant.com <mailto:Maciej@Merant.com> Int.PVCS.Answerline(a)Merant.com <mailto:Int.PVCS.Answerline@Merant.com> WWW: http://www.merant.com <http://www.merant.com/> begin 600 Merant Internal.jpg M_]C_X``02D9)1@`!`0$!+`$L``#_VP!#``,"`@,"`@,#`P,$`P,$!0@%!00$ M!0H'!P8(#`H,#`L*"PL-#A(0#0X1#@L+$!80$1,4%145#`\7&!84&!(4%13_ MVP!#`0,$!`4$!0D%!0D4#0L-%!04%!04%!04%!04%!04%!04%!04%!04%!04 M%!04%!04%!04%!04%!04%!04%!04%!3_P``1"`#Q`E<#`2(``A$!`Q$!_\0` M'P```04!`0$!`0$```````````$"`P0%!@<("0H+_\0`M1```@$#`P($`P4% M!`0```%]`0(#``01!1(A,4$&$U%A!R)Q%#*!D:$((T*QP152T?`D,V)R@@D* M%A<8&1HE)B<H*2HT-38W.#DZ0T1%1D=(24I35%565UA96F-D969G:&EJ<W1U M=G=X>7J#A(6&AXB)BI*3E)66EYB9FJ*CI*6FIZBIJK*SM+6VM[BYNL+#Q,7& MQ\C)RM+3U-76U]C9VN'BX^3EYN?HZ>KQ\O/T]?;W^/GZ_\0`'P$``P$!`0$! M`0$!`0````````$"`P0%!@<("0H+_\0`M1$``@$"!`0#!`<%!`0``0)W``$" M`Q$$!2$Q!A)!40=A<1,B,H$(%$*1H;'!"2,S4O`58G+1"A8D-.$E\1<8&1HF M)R@I*C4V-S@Y.D-$149'2$E*4U155E=865IC9&5F9VAI:G-T=79W>'EZ(a)H.$ MA8:'B(F*DI.4E9:7F)F:HJ.DI::GJ*FJLK.TM;:WN+FZPL/$Q<;'R,G*TM/4 MU=;7V-G:XN/DY>;GZ.GJ\O/T]?;W^/GZ_]H`#`,!``(1`Q$`/P#]4Z***`"B MBB@`HHHH`****`"BBB@`HHHH`****`"BBB@`HHHH`****`"BBB@`HHHH`*** M0G%`"T4W=1NH`=13&DV]:C:Z5:!I-D]%5OMJ4?;4H*Y)=BS14*W*M3P^>E!+ M36X^BF[J-U`AU%-W4;J`'44QI`O6H_M2T#LV3T5!]K6@72FE<?*^Q/13!(&Z M4NZF2.HINZC-`#J***`"BBB@`HHHH`****`"BBB@`HHHH`****`"BBB@`HHH MH`****`"BBB@`HHHH`****`"BBB@`HHHH`****`"BBB@`HHHH`****`"BBB@ M`HHHH`****`"BBB@`HHHH`****`"DSBD)P::\@4<T#M<?D4PN!U-5WNUZ"J< MD[%N#Q0;1I.6YI-,%[YJK+>E3@54,K'O0J-)S18VC24=R?[<WO2_;7/8TD-H MV<D5;2W4#D4$R<(]"H;EW/0U(D/G#FK:P)Z4[8%'`Q2L9NHOLHI_81[4&Q`] M*MD@=:AEN54$4`ISEL1^4L?0TR2Z,1P*KR3,QX/%1DDGGFFD="IWUD6?MS>] M'VYO>H%B9^E68;4]Q3!J$1/MK^AIZ73MV-6%MU`Y%2+"@'2D8.<.Q$%,B4PV MF?2K)`45&TZJ<4K&:;Z$7V,>HH^R;?2K"L&&13L46#GD4G=H^F:C^V..QK0, M:GJ*C,"9Z4)6+4X]44_MSCL:/MS>]3RVV1P*IM;,M,VCR2+\5SO')J7S!_>K M'W,G&<4OFOZT"=&^QLJP/>ER*SX;H!>35F.X5SQ0<\H-%BBF[LTHY%!F+111 M0`4444`%%%%`!1110`4444`%%%%`!1110`4444`%%%%`!1110`4444`%%%%` M!1110`4444`%%%%`!1110`4444`%%%%`!1110`4444`%%%%`!32>*":AFE"J M0.M`TKB3S>6.M4I+HMD4R64NQ':HJ:1W0II+4***DBC+L/2F;-V'0P>8>:OP MVP04Z*(*H..:F`Q4G#.HV]``P.E&12U&QP,T&`_(II.!4/V@9IDMP"#0:*#N M-N+C`ZU1=RYR:'<L3FFTT=T(**"IX8/,ZTV"/>U:4,03M0V14GRZ(;%;!0*G M`YI0,4M(X6V]Q,4M%%`AK<U0NQM-:!&:J7:B@UINTB&"Z(.VKR.&`YK&/#<5 M9MIRIY-%C>I3OJC3SFC%,1]PR*?0<>P8ICIN!R*DHH#8SY[0#FJ3`J<&MIE! M&#5*[@]*#KIU.C*-/CD,9R*:1@TE5N=35R]#=%B*NJV0.:Q0Q4Y%7+6<DC)J M=CEJ4^J-#.:6F(<\T^@Y`HHHH`****`"BBB@`HHHH`****`"BBB@`HHHH`** M**`"BBB@`HHHH`****`"BBB@`HHHH`****`"BBB@`HHHH`****`"BBB@`HHH MH`****`&GK6;=288BM%N]95U_K*#HHJ[(:***L[0J_:1Y451')K4M%&RI9C5 M=HEA0,4M)TI:1P!4;K\AJ2D;I0-&5/E"2*A+$]ZN7<6!TJC31Z$&FKA2CDTE M.C&YQ3-"_:Q8P<5<Q44(`05-4GFS=V%%%%!`4444`)G%5+LBK351O7P30:TU M>12;J:`<&DHJCT#0MI\@"KH(XK'@8JXK3B?<!4G%5A9W)J***#G"HI4W5+36 MZT#3L9$Z[7J*K%T/GJO31Z4=(a)I\;[&IE%.Q6YK6[;DJ<=*J6I^6K8Z5)YLU9 MBT444$!1110`4444`%%%%`!1110`4444`%%%%`!1110`4444`%%%%`!1110` M4444`%%%%`!1110`4444`%%%%`!1110`4444`%%%%`!1110`QN]9ETGS9K5( MJM/%N!-!K3ERLRZ*>Z%#S3*H]#<*TK.3Y:S:G@EVD"DS.I'F1K#I2U'')N45 M)2//:L%(1FEHH$03Q[EK,FC\MJV&ZU4N(<YXXI;'12G9V,ZI[=<G-1.I4D5+ M;M@XJF=<MC4C'R"GTR(Y04^D>:PHHHH$%%%-)ZT`-E;"YK-NWW&K5Q,-N*SB MQ8Y-".NE'J)114T$>^J;L=+=E<C7((-:%JQ.*!;#;TYIT$10\U+.:<U)%E:6 MFK3J#D$SBF.P%.8X%4[J;'0TKEQCS,J7#9>HJ5CN.:2K1Z*5E8*55W'%%6;: M$EN:&*3Y5<M6RX6K(Z4R-`HQ3^E2>=)W8M%%%!(4444`%%%%`!1110`4444` M%%%%`!1110`4444`%%%%`!1110`4444`%%%%`!1110`4444`%%%%`!1110`4 M444`%%%%`!1110`4444`%-9<C%.HH`J36N^J$D91L5LD9J&2%6!XYH.B%5K1 MF12@X-6I;4YX%0&%E[55SK4DR>WN2#BKL<H<=:R.0:DCG93R>*1E.ES:HUP> M*=5**Z4#GFK"W"M2.1P:)*:RY4BE#YI3S01L4;BVXS51048<5L%`1@U`]N"> M*1TPJ:68^%LH*FJ"-"O6IMU,PEN+29%-,@'6HGN56@%%LE9@.]5Y[C;D9J": MYR#@U59RW4T+4Z(4NK%DDWFF4H!)P*FCMF8T]CI;44,BC+M[5H06_EXI8H`H MR1S4X&*6YR5*G-H@`I<"DW4UI0*#"UQ^132V.]0/=**JS7&>AH-(TW(L3W.` M>:H22&0TA8MU-"H6Z"FE8[(P4!M+C-2I;,:MPVP[BBX2J*)!!;;B":OQQ;,4 MJ(!TIXXI''.;D%+1109!1110`4444`%%%%`!1110`4444`%%%%`!1110`444 M4`%%%%`!1110`4444`%%%%`!1110`4444`%%%%`!1110`4444`%%%%`!1110 M`4444`%%%%`!28I:*`&D<U&\(:IJ*!IM%)K$$]JA>SVUI$9I"F:#559(R6@( MI5=D[&M,PJ>U(;=#VI%^U3W*"W;+V-2"^;T/Y5:^S)Z4GD)Z4"YX/H0"\8]C M3C='TJ7R%H\A:";P[%<WC#M^E--ZQ['\JMBW0CI2_9D]*!\T.Q1,S,.AJ*1" MYK3$"CM2^2M,I54MD9!C8=J;M/H:V?(7TI/LR>E!7MUV,E"5;.*MI<%>QJT; M=!VI/(6D)U(RW1!]K;T_2D-\P[&I_(6C[.OI1<B\.Q5-ZQ[&F&=F[&KXMT/: ME^S)Z4RN>"V1EE"YS3TML]:TO(6E$0'2EJ#K=BDMCG!J9+3;5C;2CBF9.I)C M53:.!3@.*6B@S$I:**`"BBB@`HHHH`****`"BBB@`HHHH`****`"BBB@`HHH MH`****`"BBB@`HHHH`****`"BBB@`HHHH`****`"BBB@`HHHH`****`"BBB@ M`HHHH`****`"BBB@`HHHH`****`"BBB@`HHHH`*3%+10`F*,4M%`!1110`44 M44`%%%%`!28I:*`$Q1BEHH`****`"BBB@`HHHH`****`"BBB@`HHHH`****` M"BBB@`HHHH`****`"BBB@`HHHH`****`"BBB@`HHHH`****`"BBB@`HHHH`* M***`"BBB@`HHHH`****`"BBB@`HHHH`****`"BBB@`HHHH`****`"BBB@`HH MHH`****`"BBB@`HHHH`****`"BBB@`HHHH`****`"BBB@`HHHH`****`"BBB M@`HHHH`****`"BBB@`HHHH`****`"BBB@`HHHH`****`"BBB@`HHHH`****` M"BBB(a)`HHHH`****`(_,YZT]3D5GSR%)./6K<$H*"K<;*Y*=R:DR*#TJ&8D)Q M4%I7)MP]:-P]:S&F9.II%N&8XS2-O9,U,BC.:K6[,>M6`<4S%JSL*2*C\SG& M:1Y`N<U2$I:7&>*N,;D-V-!6S3ZBCY`J6H*"BBB@`I,B@]*BE.U:`)=P]:-P M]:S)+A@>M,^TMZULJ39'.C6W#UHW#UK)^TMZT?:6]:?LF+G1K;AZT;AZUD_: M6]:DBG9B!FDZ;0^=&G134.5%.K$L****`$SBC</6D;K5*YE96X.*J,>9V$W8 MO;AZT;AZUD_:6]:/M+>M:^R9'.C6W#UHW#UK)^TMZTJW)]:7LF'.C5R*6J4= MR#U-6ED#=*S<6BT[CZ*0'-+4C"BBB@`HHHH`*3(H)Q5>>7;FFE=V%L6-P]:- MP]:RFN6SUJ2&X)ZFM73:5R>9&CG-+3(SD4^L2PHHHH`****`"D)`I:JWCE!Q MZ4TKNPF[%G</6C(K)%RV>M6[>?<>35N#1*DF7**0-FEK,L****`$W"C</6JM MPY4\&J9N6SUK6--M7(<DC6W#UHSFJ$$S-U-7D.5J)1Y2D[CJ***D8FX4;AZU M4N9"AX-5/M+#O6L8.1#DD:VX>M&X>M9/VEO6C[2WK5>R8N=&MN'K1N'K63]I M;UH^TMZT>R8<Z-;</6C(K)%RV>M787+#FHE!Q*4KEG(HR*KRL0.*C,K#O4I7 M"Y<R**J1RLQY-%%K#N5KS[WXT6\Q!Q1>?>_&JX.#76E>)@W9FPC[A2LNX8JC M:S]C5]/F7-<LH\K-XLH7,/-1PP_/6BT88\T+&JG(J#I56RL$<>RG2$`4%N*J M7,XVX'6JBKLYF^K(KF;FH8.91498L>:?!_K176E9'/>[-6/H*EJ*/H*EKC9T MA1112`0]*AF^Y4QZ5#-]RFMP,R7[U1U)+]ZFH,L!7<MCE8F*,5HPVZD"IOLR M>E9.HD7R,R,5+;CYQ6E]F3TI1;HIX%2ZB:&H,>GW!3J0#`I:YS8****`&MUK M/O/O5H-UK/O/O5K3^(SGL4Z7%)5RUB#CFNINRN9)7*F#Z4E:IMDQTJK/!C.! M4*HF4X-%4'%6[:;&!53I3HV(854E=$Q=F;*'*]:=4$+905,.E<3T.D6BBBD` M444AXH`1^!6?>/SBKDSX2LR9]S5M36MS.;T(J<APPIM%=1B:T#Y05..E4+:0 M<"KP;I7%)69T)Z#J***@H****`"J=_\`=_"KE4[_`.[^%:0^(F6QFT^*3RVS M3**[#G-2WFW+5D'CK6/#(58#M6E'*"H]:Y)QLS>+N3T4@.:6LBRE<]:SSUK0 MN>M9YZUV4]CGEN6;;M6E']T5FVW:M*/[HK&IN:0V'4445B:%&[ZU0(.>E;31 M!NM,^S)Z5O&:BK&3C<R,4E:4L"@&L]QAB*VC)2,W&PVEQ3HUW-6A%;H4YHE) M1&HW,T`YK2MNE2BV3'2GK&%Z5A.:DK&D8V&.N>U1O%D>E6-M&VLKEV*R1%31 M5G;11<+&9>?>_&JU6;S[WXU6KMCL<\MQ5."#6C;7&5`S6;4D+[&]J4H\R"+L M;(P:1N*A@E#"G32!5S7)9WL=%R.>;8#S6=(VYB:?<2[SQ4-=4(\J,92N%20? MZT5'4D'^M%6]B%N:L?05+44?05+7"SJ"BBBD`AZ5#-]RICTJ&;[E-;@9DOWJ M2/[XI9?O4U#AA7:MCEZFK!T%3U3AN%&*F^U)ZUR-.YT)HFHJ'[4GK3EG5NE3 M9CNB2BD!R*6D,****`&MUK/O/O5H-UK/O/O5K3^(SGL4ZOV?W1]*H5=LVPM; MSV,X;E\=*BFQM-/$(a)`YJM/.IKFC%MFS>A0?[YH3[PI&.6)IT8)85V;(Y^IIP M?<6IQTJ&$805,.E<3W.E"T445(PI#TI:8[8!H`K7+_)BLZI[B3+$57KL@K(P MF[L**G6+*9Q43+M-6G<BP^!L.!6I&<@<UD(<,*T;9\FL*JZFL&6Z*0'-+7.: MA1110`53O_N_A5RJ=_\`=_"M(?$3+8S:**?&NYL5V'.,JQ;S8-0NA4T@.*EI M20T[,V(GW#-2UG6L^!@]:O*^17)*-F;IW*MSUK//6M"YZUGGK733V,9;EFV[ M5I1_=%9MMVK2C^Z*QJ;FD-AU%%%8F@4444`5YONFLN3[YK4F^Z:RY/OFNFD8 MS'1?>K4B^Y67%]ZM2+[E*J.!*.E+2#I2USFH4444`%%%%`&5>?>_&JU6;S[W MXU6KNCL<TMQP0D4VKMK&&3FJ\T15B>U)25[!;2XZ";R^].FN=ZXS5:BGRJ]P MN]@IVPXS3HHR[<5<:("+WI.26@U&YGU)!_K13#U-/@_UHJGL2MS5CZ"I:BCZ M"I:X6=04444@$/2H9ON5,>E0S?<IK<#,E^]4=22_>I@&37<MCE849J>.W+8J M7[*?2DY)%<K*>:LVW44_[*?2I(X2IS42DFAJ+N7%^Z*6D7[HI:Y#<****`&M MUK/O/O5H-UK/O/O5K3^(SGL4ZDCE*#%1TH4D<5UF),UR2*A))-)2CDBE9(+M M@!FK=M!GFGPPJ5!JTD87I6$ZG1&L8]1Z#"]*=2`8I:YS4****`"J\[8!YJ9N M*HWDF*N*NR6[(J2G+FF(a)9-!YI\6,\UV;(Y]V7H5S&.*JW2;35N.50O6JUVX; MI7/&_,:RM8JU;LVYZU4J2%]IK>2NC.+LS83D4ZH8&^2I1S7$]SH%HHHI#"J= M_P#=_"KE4[_[OX5I#XB9;&;5BT'SU7JS9_>_&NJ6Q@MR::#()Q5%AM)%;&W( MJE<0>E8PGT9I*/4J*<$&K]O/NP,U0(P:=&^PUK*/,B(NQ=N#DU0/6K#2@U7H M@K*P2=RS;=JTH_NBLVV[5I1_=%85-S2&PZBBBL30****`*\WW367)]\UJ3?= M-9<GWS732,9CHOO5J1?<K+B^]6I%]RE5'`E'2EI!TI:YS4****`"BBB@#*O/ MO?C5:K-Y][\:K5W1V.:6YHV/W*?<)N'2F6'*599<US2=I&T=C(DC\LTBKN.* MOS0;C38[?:V<5JJBL9\NH^UAV5)<?ZNI0H4<5%<?ZNL+WE<UM9&4>II\'^M% M,/4T^#_6BNQ['.MS5CZ"I:BCZ"I:X6=04444@$/2H9ON5,>E0S?<IK<#,E^] M21_?%++]ZFQ\.*[5L<O4U(`,"I\57(a);IQ4^ZN.6YTH7%&*3=1NJ1CJ*0<TM` M!1110`UNM9]Y]ZM!NM9]Y]ZM:?Q&<]BG5J!<H:JU>M!E?PK>;LC..Y5ECVDF MF5?N(LKQ5!E*G!IQE=":L7+:?/%7AUK&1]C9K1MIMW6L:D>J-(RZ%NBD!R*6 ML#4***0]*`&2G"UF7+[FJ[<OA*S"2QR:Z*2ZF,V)12@%C@4\0.>U=!F-#$=S M2$YI_D/Z4>0_I2N@LR.EI3&R]13:8&E;/\E6QTK*MI"&`K31L@5QS5F=$7=# MZ***S*"J=_\`=_"KE4[_`.[^%:0^(F6QFU9L_O?C5:K-G][\:ZI;&$=S22DD M3=2I3ZXNITF5<P[6S5:M>6,,IK-FB*$FNF$KJQA*-M2*BBBMC,M6W:M*/[HK M-MNU:4?W17+4W-X;#J***Q-`HHHH`KS?=-9<GWS6I-]TUER??-=-(QF.B^]6 MI%]RLN+[U:D7W*54<"4=*6D'2EKG-0HHHH`****`,J\^]^-5JLWGWOQJM7=' M8YI;FEI_W:MU4T_[M7*Y)_$;QV$P/2C`]*6BH'80]*@N/]74YZ5!<?ZNJCN@ M>QE'J:?!_K13#U-/@_UHKM>QS+<U8^@J6HH^@J6N%G4%%%%(!#TJ&;[E3'I4 M,WW*:W`S)?O4P'!S3Y?O5'7<MCE992[V8J3[?5*BIY(CYF7?M]/CO-Y`K/J: MW^^*EPC8:DS63E13J:GW!3JY#H"BBB@!K=:S[S[U:#=:S[S[U:T_B,Y[%.K] MG]T?2J%7[/[H^E;SV,X;EMAD=*SKF/G-:8&:@FC!4USP=F;-71E5+#+L(IL@ MPYIE=>Z.?9FO"^4'-3`UG6KDXYJ^O:N.4>5G2G=#Z:QX-.J*7[IJ!E&YDR2, MU4J2<Y>F5W15D<TG=D]LF7%:(C'''Z57MD&`:N#I7-4E=FT59#=OM2%>.E24 M5D64KB/Y3Q^E9]:\R?)67*N&KJINZ,9H2(X<5IP-D"LH=:O69)HJ*Z%!]"_1 M35IU<IN%4[_[OX5<JG?_`'?PK2'Q$RV,VK-G][\:K59L_O?C75+8PCN:24^F M)3ZXF=(TCCI5>YBWCI^E6J:5S0G9B:N8LB;&Q3:OW,0ZU1(P:[(RYD<\E8LV MW:M*/[HK-MNU:4?W16%3<UAL.HHHK$T"BBB@"O-]TUER??-:DWW367)]\UTT MC&8Z+[U:D7W*RXOO5J1?<I51P)1TI:0=*6N<U"BBB@`HHHH`RKS[WXU6HHKN MCL<TMS2T_P"[5RBBN2?Q&\=@HHHJ"A#TJ"X_U=%%5'=">QE'J:?!_K1117:] MCF6YJQ]!4M%%<+.H****0"'I4,WW***:W`S)?O5'117<MCE84444Q!4UO]\4 M44GL-;FLGW!3J**X#J"BBB@!K=:S[S[U%%:T_B,Y[%.K]G]T?2BBMY[&<-R\ MO2HI?NFBBN6.YT&5+]\TRBBNU;'*]RW:=16@O:BBN6IN;PV'U%+]TT45FMRS M*F^^:8.M%%=RV.5[FE;?=%6ATHHKCGN=$=A:***@HCF^X:RI^M%%=%(RF1CK M5ZRHHK2>Q$=RZM.HHKC.@*IW_P!W\***TA\1,MC-JS9_>_&BBNJ6QA'<TDI] M%%<3.D****0%2YZ5FM]XT45U4]C">Y9MNU:4?W1116=3<N&PZBBBL30****` J*\WW367)]\T45TTC&8Z+[U:D7W***54<"4=*6BBN<U"BBB@`HHHH`__9 ` end

1 0

PINE and holes
by Tobias Burnus 02 Nov '00

02 Nov '00

Hi, the FreeBSD has recently issued two security warnings concerning PINE 4.21 SA-00:47: pine4 port allows denial of service SA-00:59: pine4 port contains remote vulnerability ftp://ftp.FreeBSD.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-00:47.pine.asc http://www.securityfocus.com/frames/?content=/templates/archive.pike%3Fthre… and on the pine site they claim that they fixed these security related bugs in 4.30. | Bugs that have been addressed in this release include: | | * Incoming mail with an extremely long From address can cause a | buffer overflow on the stack (security) | * X-Keywords crash for unix formatted mailboxes | * Pine crashes when replying to or forwarding messages with certain | types of attachments Can we expect an update or is SuSE's 4.21-123 not vulnerable to either bugs. Tobias

6 8

Xinetd
by Boris Kantwerk 02 Nov '00

02 Nov '00

Hi *! Security reasons decided me to use xinetd instead of inetd. I installed the xinetd-2.1.8.8p3-40.rpm on my SuSE 6.2 running a 2.1.16 kernel. On starting the daemon I receive following error message: modprobe: Can't locate module net-pf-10 What kernel option or anything else can help to get this module? Thanx, Boris.

2 3

preventing login screen emulation?
by Michael Grundel 02 Nov '00

02 Nov '00

Hi! My problem: Any user can write a simple program that emulates the behavior of the console login. Executed in a console it waits for an unsuspecting user and logs the username/password to a file. It then shows login incorrect and exists (starting the real login-program). Most users will assume they had a typo in the password and will not know that their password was stolen. This is a problem e.g. at university labs with linux-PCs and many "creative" users. Is there a way to prevent a user from "emulating" a login screen (especially for the console)? I think in WinNT this problem is solved by pressing Ctrl-Alt-Del before logging in and it is guarateed that that key-combination will be answered by the OS login screen. Is there anything similar for linux? Michael -- eMail: m1chael(a)gmx.net PGP key available on request

4 6

NOQUEUE: HELO/EHLO attack?
by Volker Tanner 01 Nov '00

01 Nov '00

Dear list members, as we only run a dial up mailserver I'm not very experienced with security issues. So it got me by surprise to find this in my /var/log/mail: Oct 31 17:15:50 kbsvr07x sendmail[26682]: NOQUEUE: h-62.96.138.42.user.addcom.de [62.96.138.42] (may be forged): HELO/EHLO attack? Oct 31 17:15:51 kbsvr07x sendmail[26682]: NOQUEUE: Null connection from h-62.96.138.42.user.addcom.de [62.96.138.42] (may be forged) What does it mean? I run tripwire regularly, it does not show anything unusual, neither do my other logfiles. Normally I have the mailserver connecting our ISP at this time to fetch mail, so the dial-up connection was correctly initiated. Dial in is disabled. I ran nslookup at the given address, the hostname fits it, the information in whois database don't tell me anything I can find useful. Thank you for the answers Greetings VOlker

1 0

Re: [suse-security] preventing login screen emulation?
by Volker Kuhlmann 01 Nov '00

01 Nov '00

> The last that comes into my mind is a small script or program that runs > started by init and that kills all non-root (and possibly others) programs > on the machine. It could be bound to ctrl-alt-del like the following > (/etc/inittab): Hmmmm. There goes multi-user... :-(( (I mean someone could have legitimate processes running wihtout terminal.) > Personally, I dislike the ctrl-alt-del thing. It seems to me that it > should teach people that rebooting just like in old DOS times isn't really > necessary any more and that there has been some progress since color TV > was invented. That's a good one to add to "quotable quotes" :-) Volker

2 1