April 2001 - openSUSE Security - openSUSE Mailing Lists

SuSE Security Announcement: nedit (SuSE-SA:2001:14)
by Thomas Biege 19 Apr '01

19 Apr '01

-----BEGIN PGP SIGNED MESSAGE----- ______________________________________________________________________________ SuSE Security Announcement Package: nedit Announcement-ID: SuSE-SA:2001:14 Date: Wednesday, April 18th, 2001 13.06 MEST Affected SuSE versions: [6.1, 6.2] 6.3, 6.4, 7.0, 7.1 Vulnerability Type: locoal privilege escalation Severity (1-10): 3 SuSE default package: no Other affected systems: all systems using nedit Content of this advisory: 1) security vulnerability resolved: nedit problem description, discussion, solution and upgrade information 2) pending vulnerabilities, solutions, workarounds 3) standard appendix (further information) ______________________________________________________________________________ 1) problem description, brief discussion, solution, upgrade information The Nirvana Editor, NEdit, is a GUI-style text editor based on popular Macintosh and MS Windows editors. When printing a whole text or selected parts of a text, nedit(1) creates a temporary file in an insecure manner. This behavior could be exploited to gain access to other users privileges, even root. There is no workaround possible, because tmpnam(3) ignores the TMPDIR environment variable. Just install the new RPM to fix this problem. Download the update package from locations described below and install the package with the command `rpm -Uhv file.rpm'. The md5sum for each file is in the line below. You can verify the integrity of the rpm files using the command `rpm --checksig --nogpg file.rpm', independently from the md5 signatures below. i386 Intel Platform: SuSE-7.1 ftp://ftp.suse.com/pub/suse/i386/update/7.1/xap2/nedit-5.1.1-151.i386.rpm 07efdf2fa5c475fcf40633d392d4ae1d source rpm: ftp://ftp.suse.com/pub/suse/i386/update/7.1/zq1/nedit-5.1.1-151.src.rpm 27e52c3688082257d7f7ecf81c461ad9 SuSE-7.0 ftp://ftp.suse.com/pub/suse/i386/update/7.0/xap1/nedit-5.1.1-151.i386.rpm b9846658b0f9c8330b8f9c5732b9e115 source rpm: ftp://ftp.suse.com/pub/suse/i386/update/7.0/zq1/nedit-5.1.1-151.src.rpm d2dc1c39dbad292326f953e1e84fe187 SuSE-6.4 ftp://ftp.suse.com/pub/suse/i386/update/6.4/xap1/nedit-5.0.2-207.i386.rpm c5c6eebe946463926583272690ca4d27 source rpm: ftp://ftp.suse.com/pub/suse/i386/update/6.4/zq1/nedit-5.0.2-207.src.rpm 0a486fa81f4b84ab6f09bd5353b0fd4d SuSE-6.3 ftp://ftp.suse.com/pub/suse/i386/update/6.3/xap1/nedit-5.0.2-208.i386.rpm e1e0baeca49ce972df89a5bb5ebfc6c2 source rpm: ftp://ftp.suse.com/pub/suse/i386/update/6.3/zq1/nedit-5.0.2-208.src.rpm 9a3328dc8fb8a4da343be20c10cb0c02 Sparc Platform: SuSE-7.1 ftp://ftp.suse.com/pub/suse/sparc/update/7.1/xap2/nedit-5.1.1-135.sparc.rpm 2370e09571b1037270d34afb555cc408 source rpm: ftp://ftp.suse.com/pub/suse/sparc/update/7.1/zq1/nedit-5.1.1-135.src.rpm 0ac1364f6b97d503444e6fcb4a0b20df SuSE-7.0 ftp://ftp.suse.com/pub/suse/sparc/update/7.0/xap1/nedit-5.1.1-134.sparc.rpm a60e8f47d4ac4794f7ee472ef1d7ccb4 source rpm: ftp://ftp.suse.com/pub/suse/sparc/update/7.0/zq1/nedit-5.1.1-134.src.rpm 96c96dda6b1ba8b91bebbf3f1a9a56c6 AXP Alpha Platform: SuSE-6.4 ftp://ftp.suse.com/pub/suse/axp/update/6.4/xap1/nedit-5.0.2-207.alpha.rpm cde274f25bec040ae289ef0fb8520b7e source rpm: ftp://ftp.suse.com/pub/suse/axp/update/6.4/zq1/nedit-5.0.2-207.src.rpm 4cdff5d4836bf4f926298bb3b3a1c513 SuSE-6.3 ftp://ftp.suse.com/pub/suse/axp/update/6.3/xap1/nedit-5.0.2-207.alpha.rpm fc7fc98267dc76ceec30633068d72533 source rpm: ftp://ftp.suse.com/pub/suse/axp/update/6.3/zq1/nedit-5.0.2-207.src.rpm fc3ddc09f7c3383b01721e6462f77748 PPC PowerPC Platform: SuSE-7.1 ftp://ftp.suse.com/pub/suse/ppc/update/7.1/xap2/nedit-5.1.1-122.ppc.rpm 1f413b9e77263ec37d0e42dde6cb55d1 source rpm: ftp://ftp.suse.com/pub/suse/ppc/update/7.1/zq1/nedit-5.1.1-122.src.rpm 403bcf64a6ba2824899316e3bd8ea41d SuSE-7.0 ftp://ftp.suse.com/pub/suse/ppc/update/7.0/xap1/nedit-5.1.1-122.ppc.rpm e771c3bcd7cbc0121a527089ad40a336 source rpm: ftp://ftp.suse.com/pub/suse/ppc/update/7.0/zq1/nedit-5.1.1-122.src.rpm f45e0786fefb5c92fbd61e8c4a36ab32 SuSE-6.4 ftp://ftp.suse.com/pub/suse/ppc/update/6.4/xap1/nedit-5.0.2-146.ppc.rpm 7dcb7bf1110311063daac06df1f7cccb source rpm: ftp://ftp.suse.com/pub/suse/ppc/update/6.4/zq1/nedit-5.0.2-146.src.rpm 5f1d6da7f268b8c10f7ea8a4f7a1fab5 ______________________________________________________________________________ 2) Pending vulnerabilities in SuSE Distributions and Workarounds: - New RPMs for HylaFax, a Fax Server, are currently being build, which fix a format bug in hfaxd, which could lead to local root privilege. - Updated man RPMs will be available in a few days. - In the past weeks, some security related bugs in the Linux kernel 2.2 and 2.4 were found. An announcement, that addresses this will be released this week. - Samba has serveral security problems, which could lead to local root access. Samba 2.0.8 fixes these problems. New RPMs are currently being build. ______________________________________________________________________________ 3) standard appendix: SuSE runs two security mailing lists to which any interested party may subscribe: suse-security(a)suse.com - general/linux/SuSE security discussion. All SuSE security announcements are sent to this list. To subscribe, send an email to <suse-security-subscribe(a)suse.com>. suse-security-announce(a)suse.com - SuSE's announce-only mailing list. Only SuSE's security annoucements are sent to this list. To subscribe, send an email to <suse-security-announce-subscribe(a)suse.com>. For general information or the frequently asked questions (faq) send mail to: <suse-security-info(a)suse.com> or <suse-security-faq(a)suse.com> respectively. =============================================== SuSE's security contact is <security(a)suse.com>. =============================================== ______________________________________________________________________________ The information in this advisory may be distributed or reproduced, provided that the advisory is not modified in any way. SuSE GmbH makes no warranties of any kind whatsoever with respect to the information contained in this security advisory. -----BEGIN PGP SIGNATURE----- Version: 2.6.3i Charset: noconv iQEVAwUBOt6v6ney5gA9JdPZAQHoGQf+OVNf/4uNC9GXtDVBXrnp1suvSsnIpWHn fGsE55QqJhTYUfGSHbyELa3uPZ9gsQnHGpyKG1wMwGKbFRPKtF870cPRY5Q6s0zK XNA+FNLkMcyAHiw9McUkWQ8W786uiyP3PEGLNpLmKuI6acVd6drFsSqLf0MwRHNb fHmcJl29b1mk7cuUNuqfQ2Sr9bxnwVc03hTOsWZNYbrIqDoq8WsfUvs+drKfGEZy tPuo5McI8EL60SdO787+iMuUB759i86LzF+NK4fu7KWx31vx9ebRY5IpZh/mFfI5 Wq/C00KCI9gl0UO80Zhj6aQIc94VhwemrlM7uV0ICHWJwLHMt6fWUQ== =bQUE -----END PGP SIGNATURE----- Bye, Thomas -- Thomas Biege, SuSE GmbH, Schanzaeckerstr. 10, 90443 Nuernberg E@mail: thomas(a)suse.de Function: Security Support & Auditing "lynx -source http://www.suse.de/~thomas/thomas.pgp | pgp -fka" Key fingerprint = 51 AD B9 C7 34 FC F2 54 01 4A 1C D4 66 64 09 84

1 0

RE: Re: Re: [suse-security] Re: Samba on firewall
by carlos＠keysoft.pt 19 Apr '01

19 Apr '01

My network doesn' seem to miss them :) After re-looking at my SuSEfirewall rules, maybe it's because i have the internal network protection turned off? Have to inspect again the rules generated by SuSEfirewall. Does anyone know of an udp packet generator to test this? It has to work in w2k - my internal network is all w2k. Thanks Carlos > -----Original Message----- > From: jfweber(a)eternal.net [mailto:jfweber@eternal.net] > Sent: terça-feira, 17 de Abril de 2001 19:55 > To: suse-security(a)suse.com > Subject: Re: Re: [suse-security] Re: Samba on firewall > > > ** Reply to message from Carlos Costa e Silva <carlos(a)keysoft.pt> on > Tue, 17 Apr 2001 13:16:23 +0100 > > ***What are the other ports (135,136,139) used for? > ***In here I dont have any denied packets > > port 135 is RPC (remote session services locater) > port 136 = (profiling services ) > port 139 is netbios -SSN ( a session manager for netbios) > > I just took that info off a w2k box , you MUST allow those ports open > on your internal network , I can't think of any good reason > for them to > be open on a firewall , esp if you are using Masq functions > or proxies > .. > > I know the windows stuff wont work w/o them , and samba is looking to > support windows boxen , no? > > j > > afterthought ... > ... FILE NOT FOUND. Should I FAKE it? (Y/N) > > --------------------------------------------------------------------- > To unsubscribe, e-mail: suse-security-unsubscribe(a)suse.com > For additional commands, e-mail: suse-security-help(a)suse.com > >

2 1

Unable to connect to MSN
by Stefan_Walther＠gehag-dsk.de 19 Apr '01

19 Apr '01

hi list, I have some problems while connecting to *microsoft* (bah) messager. some of us are using this to talk to some of their friends. I have a isdn-dialup-connection to t-online. I get at everytime this message: Apr 18 21:41:15 poseidon kernel: Packet log: input DENY ippp0 PROTO=6 64.4.13.36:1863 217.0.25.108:61927 L=44 S=0x00 I=639 F=0x4000 T=247 (#127) I have set to my chains: ipchains -A input -i ippp0 -p tcp -s <MYIP> <unpriviliged ports> -d 64.4.13.36 1863 -j ACCEPT ipchains -A output -i ippp0 -p tcp ! -y -d <MYIP> <unpriviliged ports> -s 64.4.13.36 1863 -j ACCEPT the same I tried for the ip 64.4.13.17. both doesn't work. as I used it to connect to the gmx-chat (gimix) it works. I need help. thx MfG. Stefan Walther stefan_walther(a)gehag-dsk.de dienst.: 030/89786448 Funk: 0172/3943961 ps: sorry for my poor english.

2 1

Re: [suse-security] su not working after harden_suse
by Markus Kohli 18 Apr '01

18 Apr '01

I certainly enter the root password, I'm not THAT stupid... I just entered my USER-ID, but it didn't change behaviour, I guess... Do I have to reboot for this? THe problem actually isn't that I can't run su, it just always give's back the answer: wrong password... I'm kinda stuck... I'll try that sudoers thing later. already had a look at it an hour ago, but i guess i'm too tired to get that thing working now... thanks anyway kind regards markus

2 1

ftp.suse.com
by Roman Drahtmueller 18 Apr '01

18 Apr '01

FYI: Thanks to Mads Martin Jorgensen, the ftp server currently sees a hardware upgrade (RAM boost) to make ls of large directories happier. Downtime is around 10 minutes. Thanks, Roman. -- - - | Roman Drahtmüller <draht(a)suse.de> // "Caution: Cape does | SuSE GmbH - Security Phone: // not enable user to fly." | Nürnberg, Germany +49-911-740530 // (Batman Costume warning label) | - -

1 0

[suse-security] su not working after harden_suse
by Markus Kohli 18 Apr '01

18 Apr '01

Hello List! I have the following problem: I ran the "new" harden_suse_3.2, with some of the options turned on. Then I got to know, that su from a normal user to root doesn't work anymore, which caused my to run undo_harden_suse. Result: none at all. Fact is, that I'm not able to run any su anymore from a shell (no matter what shell!). Could anybody please help me? Would be really happy, coz always changing console from f7 to f1 is annoying... tia kind regards Markus

1 0

Re: samba on firewall
by office 18 Apr '01

18 Apr '01

When setting samba=yes in firewall.rc.config, udp-port 137:138 is open for the whole world. I want to close these ports. But when i set samba to "no" and opening the tcp and upd ports for samba only for my internal network, it doesn't work. Need help. >>i think tcp is missing for data-copying >>IPCHAINS -A input -j "$ACCEPT" -p TCP -d 0/0 137:138 $LAA ----- Original Message ----- From: office To: suse-security(a)suse.de Sent: Tuesday, April 17, 2001 12:03 PM Subject: [suse-security] samba on firewall Hello list! Why does samba on the firewall don't work whitout this rule??? IPCHAINS -A input -j "$ACCEPT" -p udp -d 0/0 137:138 $LAA When appending this rule, everybody can send UPD packets to 137:138. I've tried to open tcp 135:139 and udp 135:139 only for internal network but it doesn't work...clients cant use samba any hints? yours B

6 6

blackjack
by Frank Lederer 18 Apr '01

18 Apr '01

Hello list, netstat -ap . . tcp 0 0 localhost:1024 localhost:blackjack ESTABLISHED 321/(dnsserver) tcp 0 0 localhost:blackjack localhost:1024 ESTABLISHED 319/(squid) . . what the hell does "blackjack" mean?!? Thanx Frank

8 10

proftpd
by Ralf Pachali 18 Apr '01

18 Apr '01

Hello, the proftpd daemon from SuSE-7.1 uses "proftp" as PAM-servicename, but the package installs /etc/pam.d/proftpd. Shouldn't it be /etc/pam.d/proftp ? mfg Ralf

2 1

Strange portmap package
by Frank Steiner 18 Apr '01

18 Apr '01

Hi, today I discovered a package "portmap-5beta-54" installed on only one of our computers here. I do not remember I've installed it, and it does not exist on any other host. It claims to be a SuSE package from series n, but I haven't found it neither on my 6.4 CD's, nor in the updates for 6.4 on the SuSE server. Possibly, some student who works for me has installed it, but I can't reach him for some days. Can someone tell me if this is a SuSE package and what it is needed for? I mean, I know it's a portmapper ;-) But do I need it on SuSE 6.4 for anything? Best regards, Frank -- Dipl.-Inform. Frank Steiner mailto:fst@informatik.uni-kiel.de Lehrstuhl f. Programmiersprachen mailto:fsteiner@web.de CAU Kiel, Olshausenstraße 40 Phone: +49 431 880-7265, Fax: -7613 D-24098 Kiel, Germany http://www.informatik.uni-kiel.de/~fst/

3 3