June 2000 - openSUSE Security - openSUSE Mailing Lists

Upgraded Qpopper 2000-6-7-0 says hello with QPOP (version 2.53)
by rhoerbe＠netpromote.co.at 13 Jun '00

13 Jun '00

Is this correct? How can I verify that the correct version or patch has been installed? Brgds Rainer Hoerbe

1 0

Re: [suse-security-announce] SuSE Security Announcement: pop
by Chrissy 13 Jun '00

13 Jun '00

Hello, Thanks for the announcement.. I was unable to find the popper for 6.1 Do 6.1 users use the update for 6.2? Thanks for the responses on the previous letter all.. Chrissy > Affected SuSE versions: 6.1-6.4 > >Please verify these md5 checksums of the updates before installing: >(For SuSE 6.0, please use the 6.1 updates) > >i386: >e8e3d308985ec977ea5e719b32c28395 >ftp://ftp.suse.com/pub/suse/i386/update/6.2/n1/pop-2000.6.8-0.i386.rpm >5f06d781dea6dc755b34f1079792cd94 >ftp://ftp.suse.com/pub/suse/i386/update/6.2/zq1/pop-2000.6.8-0.src.rpm >5194b24e2e65e0134c379fec72f5a8f2 >ftp://ftp.suse.com/pub/suse/i386/update/6.3/n1/pop-2000.6.7-0.i386.rpm >8b1290376314f54274a7d78f28e128f2 >ftp://ftp.suse.com/pub/suse/i386/update/6.3/zq1/pop-2000.6.7-0.src.rpm >62ec77feca587ff202a5f8b49f854576 >ftp://ftp.suse.com/pub/suse/i386/update/6.4/n1/pop-2000.6.7-0.i386.rpm >e15efcd8c79728222628b3f2ac4cfd6a >ftp://ftp.suse.com/pub/suse/i386/update/6.4/zq1/pop-2000.6.7-0.src.rpm

2 1

Server hangs when link is down
by Nagarjuna G. 13 Jun '00

13 Jun '00

I am running a server with SuSE 6.2, kernel 2.2.10. The server is connected through a leased 64kbps data circuit. The circuit was down yesterday due to problems with the telephone company. But when the link to wan went down the server is virtually hung. It allowed people who are already logged in to work, but many commands didn't work, such as ps. I could not su to see what the problem is. Why does this happen? I suspect the problem could be due to DNS lookups. But the server in question runs a local DNS, so at least local logins should be allowed. It was not allowing logins even from the console. Any clues would be welcome! Thanks in advance! Nagarjuna

4 4

Interresting link. Interesante link. For firewall builder. Fuer Firewall bouwers
by Joop Boonen 12 Jun '00

12 Jun '00

http://www.rootprompt.org/

1 0

Kernel 2.2.16 as sprm /rpm
by jboonen＠worldonline.nl 12 Jun '00

12 Jun '00

Dear all, I have a question. I would like to know if kernel 2.2.16 will be available as rpm package? Can i download new kernels on the suse ftp site? It seems that the is a security hole in kernel 2.2.15 <= see: http://www.sendmail.net/?feed=000607linuxbug Regards, Joop.

3 2

Info about xinetd
by Joop Boonen 11 Jun '00

11 Jun '00

Dear all, I've found a problem in xinetd 2.1.8.8p1 as SUSE is using. It didn't work, for me that is. After i have installed xinetd 2.1.8.8p3 everything was fine. When i took a look at web page of xinetd http://www.synack.net/xinetd/ . I found the warning that you can see below. Can the rpm package please be upgraded? Regards, Joop Boonen. Warning: xinetd releases prior to 2.1.8.8p3 and 2.1.8.9pre6 have a bug in the access control mechanism. If you use a hostname to control access to a service ( localhost instead of 127.0.0.1 ), xinetd will allow any connection from hosts that cannot be reverse looked up. Please upgrade to the latest version.

1 0

Re: [SLE] Problem with xinetd [PROBLEM SOLVED, old xinetd version]
by Joop Boonen 11 Jun '00

11 Jun '00

Dear all, Problem solved! xinetd seems to an older version i have installed 2.1.8.8p3 . Now everything works. Can xinetd also please be updated in updates. Regards, Joop Boonen. Joop Boonen wrote: > > Dear all, > > I have a problem with xinetd. When i use the standard configuration > file. By the way also when i try to use my own. I tells me that i have a > socket error. See below, the output of xinetd -d. > > I hope someone can help me. > > I'm using SUSE 6.4. > > Regards, > > Joop Boonen. > > 00/6/11@19:36:16: ERROR: {server_parser} Server /usr/sbin/wu.ftpd is not > executable [line=66] > 00/6/11@19:36:16: ERROR: {server_parser} Server /usr/sbin/popper is not > executable [line=127] > 00/6/11@19:36:16: ERROR: {attr_check} Service ftp missing attribute > server > Service defaults > Instances = 2 > Logging to file: /var/log/xinetd.log (no limits) > Log_on_success flags = HOST DURATION EXIT > Log_on_failure flags = HOST ATTEMPT RECORD > > Service configuration: chargen > id = chargen-stream > type = INTERNAL > socket_type = stream > Protocol (name,number) = (tcp,6) > Logging to common log file > Log_on_success flags = HOST DURATION EXIT > Log_on_failure flags = HOST ATTEMPT RECORD > > Service configuration: telnet > id = telnet > socket_type = stream > Protocol (name,number) = (tcp,6) > Server = /usr/sbin/in.telnetd > Server argv = in.telnetd -n > No access: > Logging to common log file > Log_on_success flags = HOST DURATION EXIT > Log_on_failure flags = HOST ATTEMPT RECORD > > Service configuration: time > id = time-dgram > type = INTERNAL > socket_type = dgram > Protocol (name,number) = (udp,17) > Logging to common log file > Log_on_success flags = HOST DURATION EXIT > Log_on_failure flags = HOST ATTEMPT RECORD > > Service configuration: login > id = login > socket_type = stream > Protocol (name,number) = (tcp,6) > Server = /usr/sbin/in.rlogind > Server argv = in.rlogind -n > Logging to common log file > Log_on_success flags = HOST DURATION EXIT > Log_on_failure flags = HOST ATTEMPT RECORD > > Service configuration: time > id = time-stream > type = INTERNAL > socket_type = stream > Protocol (name,number) = (tcp,6) > Logging to common log file > Log_on_success flags = HOST DURATION EXIT > Log_on_failure flags = HOST ATTEMPT RECORD > > Service configuration: daytime > id = daytime-dgram > > type = INTERNAL > socket_type = dgram > Protocol (name,number) = (udp,17) > Logging to common log file > Log_on_success flags = HOST DURATION EXIT > Log_on_failure flags = HOST ATTEMPT RECORD > > Service configuration: daytime > id = daytime-stream > type = INTERNAL > socket_type = stream > Protocol (name,number) = (tcp,6) > Logging to common log file > Log_on_success flags = HOST DURATION EXIT > Log_on_failure flags = HOST ATTEMPT RECORD > > Service configuration: chargen > id = chargen-dgram > type = INTERNAL > socket_type = dgram > Protocol (name,number) = (udp,17) > Logging to common log file > Log_on_success flags = HOST DURATION EXIT > Log_on_failure flags = HOST ATTEMPT RECORD > > Service configuration: echo > id = echo-stream > type = INTERNAL > socket_type = stream > Protocol (name,number) = (tcp,6) > Logging to common log file > Log_on_success flags = HOST DURATION EXIT > Log_on_failure flags = HOST ATTEMPT RECORD > > Service configuration: echo > id = echo-dgram > type = INTERNAL > socket_type = dgram > Protocol (name,number) = (udp,17) > Logging to common log file > Log_on_success flags = HOST DURATION EXIT > Log_on_failure flags = HOST ATTEMPT RECORD > > Service configuration: discard > id = discard-stream > type = INTERNAL > socket_type = stream > Protocol (name,number) = (tcp,6) > Logging to common log file > Log_on_success flags = HOST DURATION EXIT > Log_on_failure flags = HOST ATTEMPT RECORD > > Service configuration: discard > id = discard-dgram > type = INTERNAL > socket_type = dgram > Protocol (name,number) = (udp,17) > Logging to common log file > Log_on_success flags = HOST DURATION EXIT > Log_on_failure flags = HOST ATTEMPT RECORD > > 00/6/11@19:36:16: ERROR: {svc_activate} socket creation failed (Invalid > argument (errno = 22)ÿ¿Ü÷ÿ¿òïÿ¿'ðÿ¿lïÿ¿bhïÿ¿òïÿ¿ê xð÷ÿ¿|ïÿ¿8`ê). service > = chargen-stream > 00/6/11@19:36:16: ERROR: {svc_activate} socket creation failed (Invalid > argument (errno = 22)ÿ¿Ü÷ÿ¿òïÿ¿~ðÿ¿lïÿ¿bhïÿ¿òïÿ¿ê xð÷ÿ¿|ïÿ¿8`ê). service > = telnet > 00/6/11@19:36:16: ERROR: {svc_activate} socket creation failed (Invalid > argument (errno = 22)ÿ¿Ü÷ÿ¿òïÿ¿#ðÿ¿lïÿ¿bhïÿ¿òïÿ¿ê xð÷ÿ¿|ïÿ¿8`ê). service > = time-dgram > 00/6/11@19:36:16: ERROR: {svc_activate} socket creation failed (Invalid > argument (errno = 22)ÿ¿Ü÷ÿ¿òïÿ¿#ðÿ¿lïÿ¿bhïÿ¿òïÿ¿ê xð÷ÿ¿|ïÿ¿8`ê). service > = login > 00/6/11@19:36:16: ERROR: {svc_activate} socket creation failed (Invalid > argument (errno = 22)ÿ¿Ü÷ÿ¿òïÿ¿$ðÿ¿lïÿ¿bhïÿ¿òïÿ¿ê xð÷ÿ¿|ïÿ¿8`ê). service > = time-stream > 00/6/11@19:36:17: ERROR: {svc_activate} socket creation failed (Invalid > argument (errno = 22)ÿ¿Ü÷ÿ¿òïÿ¿&ðÿ¿lïÿ¿bhïÿ¿òïÿ¿ê xð÷ÿ¿|ïÿ¿8`ê). service > = daytime-dgram > 00/6/11@19:36:17: ERROR: {svc_activate} socket creation failed (Invalid > argument (errno = 22)ÿ¿Ü÷ÿ¿òïÿ¿'ðÿ¿lïÿ¿bhïÿ¿òïÿ¿ê xð÷ÿ¿|ïÿ¿8`ê). service > = daytime-stream > 00/6/11@19:36:17: ERROR: {svc_activate} socket creation failed (Invalid > argument (errno = 22)ÿ¿Ü÷ÿ¿òïÿ¿&ðÿ¿lïÿ¿bhïÿ¿òïÿ¿ê xð÷ÿ¿|ïÿ¿8`ê). service > = chargen-dgram > 00/6/11@19:36:17: ERROR: {svc_activate} socket creation failed (Invalid > argument (errno = 22)ÿ¿Ü÷ÿ¿òïÿ¿$ðÿ¿lïÿ¿bhïÿ¿òïÿ¿ê xð÷ÿ¿|ïÿ¿8`ê). service > = echo-stream > 00/6/11@19:36:17: ERROR: {svc_activate} socket creation failed (Invalid > argument (errno = 22)ÿ¿Ü÷ÿ¿òïÿ¿#ðÿ¿lïÿ¿bhïÿ¿òïÿ¿ê xð÷ÿ¿|ïÿ¿8`ê). service > = echo-dgram > 00/6/11@19:36:17: ERROR: {svc_activate} socket creation failed (Invalid > argument (errno = 22)ÿ¿Ü÷ÿ¿òïÿ¿'ðÿ¿lïÿ¿bhïÿ¿òïÿ¿ê xð÷ÿ¿|ïÿ¿8`ê). service > = discard-stream > 00/6/11@19:36:17: ERROR: {svc_activate} socket creation failed (Invalid > argument (errno = 22)ÿ¿Ü÷ÿ¿òïÿ¿&ðÿ¿lïÿ¿bhïÿ¿òïÿ¿ê xð÷ÿ¿|ïÿ¿8`ê). service > = discard-dgram > 00/6/11@19:36:17: DEBUG: {cnf_start_services} mask_max = 0, > services_started = 0 > 00/6/11@19:36:17: CRITICAL: {init_services} no services. Exiting... > > ------------------------------------------------------------------------ > -- > To unsubscribe send e-mail to suse-linux-e-unsubscribe(a)suse.com > For additional commands send e-mail to suse-linux-e-help(a)suse.com > Also check the FAQ at http://www.suse.com/Support/Doku/FAQ/

1 0

POP3+SSL
by Timo Schulz 10 Jun '00

10 Jun '00

Hello list, as a new feature, GMX enables a SSL POP3 port ( on 995 ) for secure downloading your emails. I look at the fetchmail FAQ and try to use the described method: 1. Create a script with: openssl s_client -quiet -ssl2 -connect pop.gmx.net:995 2. Use fetchmail with plugin fetchmail --plugin secure-gmx --port 995 Now, when I try to pop my mails the remote daemon says, that he can't find my issuer certificate. But I create a new certificate before I have downladed my emails. Then it seems that I forward to the normal POP3 port ( 110 ). Does anybody has succeed in SSL POP3 with GMX or any other mail service? Thanks in advance. -- Two-a-Day at joesixpack.net www.freenet.de/joesixpack keyid BF3DF9B4

3 2

A Question
by als 10 Jun '00

10 Jun '00

Hi, I have a question and i think the answer is no. Anyway i have a router (no firewall) (suse 6.0) with 2 network-cards. One of them has a official IP Nr.(real IP Nr.)and another card has a inofficial number. Is it possible to access from outside in to inside? and why? many thanks als

10 14

Re: suid ...sorry about that..
by Chrissy 09 Jun '00

09 Jun '00

I'm not too sure why the paste didnt work.. I'll try again using plain text: Hello all, Ive got SuSE 6.1 running on one of my machines and awhile back, i downloaded Marc's security crons.. just recently, i received an email that showed "The following programs have got a new suid and/or sgid bit:" basically, every suid program has a new bit.. here's a snippet.. --- snip --- - -rwsr-xr-x 1 root tty 135501 Dec 3 02:07 /opt/kde/bin/kvt - -rwsr-xr-x 1 root root 6220 Dec 3 02:07 /opt/kde/bin/kcheckpass - -r-sr-sr-x 1 root root 374852 Dec 2 01:53 /usr/sbin/sendmail - -rwsr-xr-x 1 man root 70028 Dec 2 01:46 /usr/bin/man - -rwsr-xr-x 1 root root 25052 Dec 2 01:46 /usr/bin/crontab --- snip --- + -rwsr-xr-x 1 root tty 135501 Dec 3 1999 /opt/kde/bin/kvt + -rwsr-xr-x 1 root root 6220 Dec 3 1999 /opt/kde/bin/kcheckpass + -r-sr-sr-x 1 root root 374852 Dec 2 1999 /usr/sbin/sendmail + -rwsr-xr-x 1 man root 70028 Dec 2 1999 /usr/bin/man + -rwsr-xr-x 1 root root 25052 Dec 2 1999 /usr/bin/crontab --- snip --- The machine was up since Dec 2.. and was recently moved and had to be rebooted... the only thing that really changed was a kernel update that took effect after the boot.. would a kernel update cause the above changes? Thanks, Chrissy

3 2