June 2005 - openSUSE Security - openSUSE Mailing Lists

apachetop. problems with fam
by Oliver Reick 02 Jun '05

02 Jun '05

Hello all, i have installed apachetop to look at my webserver, as well the required dependencies. But when i want to start apachetop this error messages comes up: cannot connect to fam: Address already in use fam version is: fam-2.6.10-36 who starts fam (the File Alteration Monitor)? And how can i get a running apachetop? Have anyone a idea... regards

1 0

some sort of attack
by Philipp Snizek 01 Jun '05

01 Jun '05

Hi got this in my access log of an apache: 213.47.46.45 - - [18/May/2005:17:17:06 +0200] "SEARCH /\x90\x02\xb1\x02\xb1\x02\xb1\x02\xb1\x02\xb1\x02\xb1\x02\xb1\x02\xb1\ x02\xb1\x02\xb1\x02\xb1\x02\xb1\x02\xb1\x02\xb1\x02\xb1\x02\xb1\x02\xb 1\x02\xb1\x02\xb1\x02\xb1\x02\xb1\x02\xb1\x02\xb1\x02\xb1\x02\xb1\x02\ xb1\x02\xb1\x02\xb1\x02\xb1\x02\xb1\x02\xb1\x02\xb1\x02\xb1\x02\xb1\x0 2\xb1\x02\xb1\x02\xb1\x02\xb1\x02\xb1\x02\xb1\x02\xb1\x02\xb1\x02\xb1\ x02\xb1\x02\xb1\x02\xb1\x02\xb1\x02\xb1\x02\xb1\x02\xb1\x02\xb1\x02\xb 1\x02\xb1\x02\xb1\x02\xb1\x02\xb1\x02\xb1\x02\xb1\x02\xb1\x02\xb1\x02\ xb1\x02\xb1\x02\xb1\x02\xb1\x02\xb1\x02\xb1\x02\xb1\x02\xb1\x02\xb1\x0 2\xb1\x02\xb1\x02\xb1\x02\xb1\x02\xb1\x02\xb1\x02\xb1\x02\xb1\x02 [...snipping most of it...]\x90\x90\x90" 414 348 Dr Google doesn't know anything bout it. Any ideas what sort of attack this is? Thanks Philipp

5 4

RE: [suse-security] some sort of attack
by suse＠karsites.net 01 Jun '05

01 Jun '05

Try entering the following into google: SEARCH /\x90\x02\xb1\x02\xb1\x02\xb1\x02\xb1\x02\xb1\x02\xb1\x02\xb1\x02 I got 730 results from that! HTH - Keith Roberts http://www.karsites.net/ SPDTool - an idea for a structured open source development CASE tool. Find out more at the above link! To: suse-security(a)suse.com From: Philipp Snizek <mailinglists(a)belfin.ch> Subject: [suse-security] some sort of attack Hi got this in my access log of an apache: 213.47.46.45 - - [18/May/2005:17:17:06 +0200] "SEARCH /\x90\x02\xb1\x02\xb1\x02\xb1\x02\xb1\x02\xb1\x02\xb1\x02\xb1\x02\xb1\ x02\xb1\x02\xb1\x02\xb1\x02\xb1\x02\xb1\x02\xb1\x02\xb1\x02\xb1\x02\xb -snip- Dr Google doesn't know anything bout it. Any ideas what sort of attack this is? Thanks Philipp

1 0

Re: [suse-security] FYI: Possible Root Privilige Escalation in 9.3 Sudo version
by Polarizer 01 Jun '05

01 Jun '05

Marcus Meissner schrieb: > On Wed, Jun 01, 2005 at 12:04:53PM +0200, Polarizer wrote: > >>Found this on bugtraq. Message is from 05/31/2005 >> >>http://www.securityfocus.com/archive/1/399427/2005-05-29/2005-06-04/0 >> >>I do not have a 9.3 box on my hands here. So please try it for yourself. >> >>security(a)suse.com became informed by author. > > > And did you see my answer? > > Sheesh. If someone can reproduce, please speak up. > > Ciao, Marcus Sorry, i did not realized the sender. BTW: When it not works on your box with a clean install it may work on another (e.g. with LDAP enabled), though. I'll run into some tests when at home. So long.

1 0

FYI: Possible Root Privilige Escalation in 9.3 Sudo version
by Polarizer 01 Jun '05

01 Jun '05

Found this on bugtraq. Message is from 05/31/2005 http://www.securityfocus.com/archive/1/399427/2005-05-29/2005-06-04/0 I do not have a 9.3 box on my hands here. So please try it for yourself. security(a)suse.com became informed by author. The Polarizer -- Polarizers at its best http://www.codixx.de/polarizer.html

2 1

Why has IPv6 support worsend in SUSE 9.3
by Arjen Runsink 01 Jun '05

01 Jun '05

L.S. Does anyone know why IPv6 support has moved backwards in SUSE 9.3? This has made me seriously move to *BSD for my SOHO firewall/router/server box. It was almoste perfect in 9.2 but in 9.3 we are back to a level that looks like pre millenium support for IPv4!! BB, Arjen

3 3