January 2001 - openSUSE Security - openSUSE Mailing Lists

RE: [suse-security] can`t login as root
by Raffy 03 Jan '01

03 Jan '01

>I want to login as root on my ftp-serive, but i cannot. >The login is incorrect. >What is to do to solve the problem 1. To login as root via FTP is a very bad idea: The password is transmitted in plain text. & ... 2. You have a file /etc/ftpusers there are users listed which cannot login via ftp (root may be in there) 3. depending on the FTP server you use, there is a config file which might deny ftp logins. Hope that helps Raffy

1 0

Re: [suse-security] can`t login as root
by Erwin Zierler - Stubainet 03 Jan '01

03 Jan '01

Hi... At 13:45 03.01.01 +0100, you wrote: >first a happy new year !! > >my English is not very good, so i hope that everybody understandt me. > >My question: > >I want to login as root on my ftp-serive, but i cannot. You should NEVER use the root account for FTP, never, period. >The login is incorrect. >What is to do to solve the problem Create a user account and use this account for FTP. Erwin PS.: please dont use the HTML format to send messages to this list, I am using a 'normal' email client that doesn't understand HTML and I bet there are many others... Erwin Zierler | Web-/Hostmaster - Stubainet | Email: Erwin.Zierler(a)stubainet.at / webmaster(a)stubainet.at | Tel.: 05225 - 64325 Fax 99 Mobil: 0664 - 130 67 91

1 0

Re: [suse-security] ssh (sftp?) problems
by Jason P. Stanford 03 Jan '01

03 Jan '01

Hmmm. Checked that. I'd had it commented out. Also checked /etc/profile and the files in /etc/profile.d just to be sure. No 'fortune' running anywhere. I just noticed that there is no sftp binary! Tried to build from the src.rpm from ftp.suse.de which fails consistently due to some missing imake file in /var/tmp??? Have you encountered any of this? --- Stefan Suurmeijer <stefan(a)symbolica.nl> wrote: > On Tue, 2 Jan 2001, Jason P. Stanford wrote: > > > I am having problems scp (sftp?) to my server. This is occuring > with > > the following clients > > > > These are the versions (via '% scp -V'): > > scp: SSH Secure Shell 2.3.0 (non-commercial version) on > > mips-sgi-irix6.5 > > scp: SSH Secure Shell 2.3.0 (non-commercial version) on > rs6000-ibm-aix > > -and- > > a Windows version under site license to my university SSH(c) Secure > > Shell(TM) Version 2.3 (Build 135), if this means anything to > anyone. > > > > % tail /var/log/messages > > Jan 3 01:21:09 foo kernel: Packet log: input ACCEPT eth0 PROTO=6 > > 128.180.1.1:1201 128.180.1.2:22 L=48 S=0x00 I=62150 F=0x4000 T=128 > SYN > > (#10) > > Jan 3 01:21:11 foo sshd[6541]: Accepted password for randuser from > > 128.180.1.1 port 1201 ssh2 > > Jan 3 01:21:11 foo sshd[6541]: subsystem request for sftp > > Jan 3 01:21:11 foo sshd[6541]: error: channel 0: internal error: > we do > > not read, but chan_read_failed for istate 8 > > > > I had a similar problem with sftp/scp. Turned out the account I was > sftp-ing to had /usr/bin/fortune in its .profile, which nuked the > connection. > > cheers > > Stefan > > > > > . > QUIT > he > connection. > > cheers > > Stefan > > > > > . > QUIT > __________________________________________________ Do You Yahoo!? Yahoo! Photos - Share your holiday photos online! http://photos.yahoo.com/

2 1

ssh (sftp?) problems
by Jason P. Stanford 03 Jan '01

03 Jan '01

I am having problems scp (sftp?) to my server. This is occuring with the following clients These are the versions (via '% scp -V'): scp: SSH Secure Shell 2.3.0 (non-commercial version) on mips-sgi-irix6.5 scp: SSH Secure Shell 2.3.0 (non-commercial version) on rs6000-ibm-aix -and- a Windows version under site license to my university SSH(c) Secure Shell(TM) Version 2.3 (Build 135), if this means anything to anyone. % tail /var/log/messages Jan 3 01:21:09 foo kernel: Packet log: input ACCEPT eth0 PROTO=6 128.180.1.1:1201 128.180.1.2:22 L=48 S=0x00 I=62150 F=0x4000 T=128 SYN (#10) Jan 3 01:21:11 foo sshd[6541]: Accepted password for randuser from 128.180.1.1 port 1201 ssh2 Jan 3 01:21:11 foo sshd[6541]: subsystem request for sftp Jan 3 01:21:11 foo sshd[6541]: error: channel 0: internal error: we do not read, but chan_read_failed for istate 8 I have uncommented the 'Subsystem sftp' line. What gives? Everything worked fine for the old ssh1 setup... __________________________________________________ Do You Yahoo!? Yahoo! Photos - Share your holiday photos online! http://photos.yahoo.com/

1 0

misc: ftp.gwdg.de, new year
by Roman Drahtmueller 02 Jan '01

02 Jan '01

Hello, paranoids, First off, on behalf of SuSE, I would like to wish a beautiful, happy and successful new year. Many things happened, but more are to come this year. I am convinced that there will be many positive changes in this year to come, especially for the security field. Secondly, something organisational: ftp.gwdg.de (the main mirror for the SuSE ftp servers) will be down for a night, while the filesystem will be rebuilt. The files will drippling in while the ftp server will still be accessible. So don't worry if you do not find any updates for some hours... Thanks, Roman. -- - - | Roman Drahtmüller <draht(a)suse.de> // "Caution: Cape does | SuSE GmbH - Security Phone: // not enable user to fly." | Nürnberg, Germany +49-911-740530 // (Batman Costume warning label) | - -

2 1

telnet as a root on a suse 6.3 suse server
by Francesco Masiello 02 Jan '01

02 Jan '01

I must be able to telnet from a terminal (not a console) as a root without using su. In solaris i could do that editing /etc/default/login file,but i can't find it on this Operating System. How can i do ? Thanks

8 7

Re: [suse-security] Login restriction
by Raffy 02 Jan '01

02 Jan '01

>> I have a user on my system who needs an ssh login shell. I don't want that >> user to escape his home directory. Is there an easy solution to restrict him >> to only his home. I could use chroot to do so, but that would involve quite >> some work, wouldn't it. >do a 'man bash' and search for restricted (shell), may be is this what you want Oh sorry, I already did that. I forgot to mention. The restricted shell would be perfect, but I want my users to be able to CD around in their home... Any ideas? Thanx Raffy

1 0

Re: [suse-security] How can I solve this problem with mail server
by Luis Oliveira 02 Jan '01

02 Jan '01

Thanks for the info, but is it possible to reject mail if the user doesn't exist in the mail server ? The sender always uses yahoo and hotmail. I cannot reject mail from those domains because people here receive messages from there (newspaper business you know). Anyway I'm going to check postfix. TIA // luis oliveira > Implement filterings using orbs or maps. www,mail-abuse.com. Also you may > want to switch to postfix. Seee www.postfix.org/ press links (they link to 2 > of my articles which have some content on why postfix is so damn good =). > > Kurt Seifried, seifried(a)securityportal.com > SecurityPortal - your focal point for security on the 'net > > ----- Original Message ----- > From: "Luis Oliveira" <lpoliveira(a)mail.telepac.pt> > To: <suse-security(a)suse.com> > Sent: Sunday, December 31, 2000 12:45 PM > Subject: [suse-security] How can I solve this problem with mail server > > >> Hi to all, >> >> >> My company mail server is running on a Suse 6.3 system, with sendmail > 8.9.3, >> and until sotime ago everything was running beautifully. >> >> What happened is that we started to receive mail messages with links to >> porno sites. These mail messages are always addressed to non existant > users >> in the mail system. We have tried to configure sendmail by way of webadmin >> to reject mail from the source addresses but the source adress is always >> changing. Is there any security problem with Suse 6.3 and/or sendmail that >> can cause this ? >> >> >> What can I do to solve this? >> >> >> >> Thanks in advance

3 2

Fwd: Linux port of OpenBSD ftpd patched
by Nix 02 Jan '01

02 Jan '01

Isn't this the default ftp server in SuSE? Does SuSE have it's own patches for this? If not it may be worth looking at this guys work. Happy New Year Everyone and good luck catching up with all the extra work created by the xmas/new year break! -Nix >Approved-By: beng(a)SECURITYFOCUS.COM >Delivered-To: bugtraq(a)lists.securityfocus.com >Delivered-To: bugtraq(a)securityfocus.com >Date: Thu, 28 Dec 2000 13:13:30 -0800 >Reply-To: bugtraq(a)THEOPHILUS.REACHIN.COM >Sender: Bugtraq List <BUGTRAQ(a)SECURITYFOCUS.COM> >From: "Trenholme, Sam" <bugtraq(a)THEOPHILUS.REACHIN.COM> >Subject: Linux port of OpenBSD ftpd patched >X-cc: david.madore(a)ens.fr, rrw(a)reptile.eu.org >To: BUGTRAQ(a)SECURITYFOCUS.COM > >I have patched David Madore's Linux port of OpenBSD's ftpd against the >problems present in replydirname(). While the word is that Linux is not >currently exploitable, it is better to be safe than sorry. > >I have also patched against the setproctitle() problems previously >reported here, even though they are a non-issue due to the manner David >Madore ported OpenBSD's FTPD to Linux. > >The patches are against the 0.2.3 release of ftpd-BSD (David Madore's name >for the port), and are available in RPM format here: > > http://www.samiam.org/rpms/ > >David Madore: Thank you for your hard work porting OpenBSD ftpd to Linux. >I hope an official patched release will come to light soon. > >- Sam --- Nix - SuSE-Security FAQ Maintainer http://www.cotse.com/nix/suse-security-faq/

2 1

Nice little newbie review
by Nix 02 Jan '01

02 Jan '01

This is an interesting review that the SuSE marketing droids may be able to use.. http://www.linuxtests.org/articles/distributions/suse/7.0/ It pretty much mirrors what I think of SuSE 7.0.. I had a very similar problem installing on my Sparc.. where linuxrc would just die... Does anyone else HATE YaST2???? -Nix -- Microsoft is to operating systems & security .... .... what McDonalds is to gourmet cooking

5 5