[philemon@spin.de: Bitte weiterleiten (was: fwd: (MAILER-DAEMON@suse.com) failure notice)]
----- Forwarded message from Benjamin Pflugmann
Hmmmm...
Which language is this?
I thought, it should be English.
Some guys never seem to learn.
Michael
-----Ursprungliche Nachricht-----
Von: Rolf Haberrecker [mailto:rolf@suse.de]
Gesendet: Dienstag, 22. Februar 2000 10:33
An: suse-security@suse.de
Betreff: [suse-security] [philemon@spin.de: Bitte weiterleiten (was:
fwd: (MAILER-DAEMON@suse.com) failure notice)]
----- Forwarded message from Benjamin Pflugmann
Personally I'm not the least bit suprised to see German on security list that is for a German distribution. (After all the SuSE 6.2 manual wasn't completely translated :-) I looked at it in babelfish to see whether there was anything I would respond to it with, but there wasn't. The babelfish translation is: -- Start translation I wanted to refer only to a ' false design ' of the MySQL bug. Since the ACL von MySQL contains also the host, from which a user comes, must one either an account find, which is de-energised for the whole world, or access to one in the ACL of listed host to have. Speak: On our own server could only local user the service abuse, since it does not occur a user with remote host into the ACL. And only trustworthy people have local access. The bug is thus - appropriate adjustments in accordance with general system security presupposed - engraving, but only half so bad, as it may seem at first sight. The appropriate recommendation should be IMHO thus - presupposed one trusts the Anwedern, which have shell access to the server - all accounts to switch off, the access of non trustet remote of host to permit. ps I am connected with TcX in no way, except that I am an active user of MySQL and do not speak in this case also in the name that FR IN GbmH. -- End translation In case Rolf Haberrecker doesn't speak english (after all I don't speak German) if someone more knowledgeable than I replies to his query with something useful, I'll pass them through babelfish back again. Michael. -- National & Local Web Cache Support R: G117 Manchester Computing T: 0161 275 7195 University of Manchester F: 0161 275 6040 Manchester UK M13 9PL M: Michael.Sparks@wwwcache.ja.net On Tue, 22 Feb 2000, Michael Lupp wrote:
Hmmmm... Which language is this? I thought, it should be English. Some guys never seem to learn.
Michael
-----Ursprungliche Nachricht----- Von: Rolf Haberrecker [mailto:rolf@suse.de] Gesendet: Dienstag, 22. Februar 2000 10:33 An: suse-security@suse.de Betreff: [suse-security] [philemon@spin.de: Bitte weiterleiten (was: fwd: (MAILER-DAEMON@suse.com) failure notice)]
----- Forwarded message from Benjamin Pflugmann
----- Hi.
Ich wollte nur auf eine 'Fehlauslegung' des MySQL-Bugs hinweisen. Da die ACL von MySQL auch den Host beinhalten, von dem aus ein User kommt, muss man entweder einen Account finden, der fuer die ganze Welt freigeschaltet ist, oder Zugriff auf einen der in der ACL gelisteten Hosts haben.
Sprich: Auf unserem eigenen Server koennten nur lokale User den Service missbrauchen, da er kein User mit einem remote host in den ACL vorkommt. Und lokalen Zugriff haben nur vertrauenswuerdige Leute.
Der Bug ist also - entsprechende Einstellungen gemaess allgemeiner Systemsicherheit vorausgesetzt - zwar gravierend, aber nur halb so schlimm, wie es auf den ersten Blick scheinen mag.
Die entsprechende Empfehlung sollte IMHO also sein - vorausgesetzt man traut den Anwedern, die Shell-Zugriff auf den Server haben - alle Accounts abzuschalten, die Zugriff von non-trustet remote hosts erlauben.
Tschuess,
Benjamin.
PS: Ich bin mit TcX in keiner Weise verbunden, ausser dass ich ein reger Nutzer von MySQL bin und spreche in diesem Fall auch nicht im Namen der SPiN GbmH.
--=20 Benjamin Pflugmann aka Philemon philemon@spin.de Developer, Guestbook Project Manager voice: +49 941 94 65 939 SPiN GmbH http://www.spin.de fax: +49 941 94 65 938 =3D=3D=3D=3D=3D=3D=3D Web design - Java chats - Guestbooks - Java/CGI codin= g =3D=3D=3D=3D=3D=3D=3D
--xesSdrSSBC0PokLI Content-Type: application/pgp-signature
-----BEGIN PGP SIGNATURE----- Version: GnuPG v0.9.5 (GNU/Linux) Comment: For info see http://www.gnupg.org
iD8DBQE4sZFjmTjUS0P7KdYRAUtRAJ9un0yTedSXimfnphsXb4t5J4qWjgCgrP94 tkjnJk1u1vRsefIyH3gnEHE= =YOQS -----END PGP SIGNATURE-----
--xesSdrSSBC0PokLI--
----- End forwarded message -----
-- Mit freundlichen Gruessen,
Rolf Haberrecker Leiter Business Partner Programm
SuSE GmbH, Tel: +49-911-7405331 Schanzaeckerstr. 10, Fax: +49-911-7417755 90443 Nuernberg, Email: rolf@suse.de Germany WWW: http://www.suse.com/
--------------------------------------------------------------------- To unsubscribe, e-mail: suse-security-unsubscribe@suse.com For additional commands, e-mail: suse-security-help@suse.com
Michael Lupp wrote:
Hmmmm... Which language is this? I thought, it should be English. Some guys never seem to learn.
Make a beginning, learn to quote... ;-)
Michael
SCNR Sascha Steiger [75! lines of fullquote deleted]
Hi, On Tue, Feb 22, Michael Lupp wrote:
Hmmmm... Which language is this?
This is german language.
I thought, it should be English.
Yes, it should.
Some guys never seem to learn.
Some human beings are not perfect. They tend to make a mistake now and then.
Michael
[excessive quoting deleted; some guys never seem to learn] Thanks, -o) Hubert Mantel Goodbye, dots... /\\ _\_v
On Tue, 22 Feb 2000, Michael Lupp wrote:
Hmmmm... Which language is this? With a domain like z3l.de, i'm surprised you don't recognize the language.
I thought, it should be English. Should be, but I don't see why everyone has to make such a big deal about it... it seems as though half this list has an email address from germany or thereabouts -- which means there will be more than enough translators to go around, I'm sure. ;)
Some guys never seem to learn. Yeah. Three years of high school German, and three quarters in
college and I still don't know German well enough to do anything but ask "Bitte, wo ist die toliette?" in a dire emergency...
dan
So Leute, um die Sache mit der deutschen Mail ein fur alle Mal abzuhaken: Wer lesen kann, ist immer noch klar im Vorteil! Auf der Suse-Homepage steht, da? diese Mailinglist in englisch ist. Ich gehe mal davon aus, dass sich jeder auf diese Art zur Liste angemeldet hat. Also hat auch jeder die Bedingungen gelesesn. Ich kann also nicht ganz nachvollziehen, was es hier zu mosern gibt. English:(Babelfish) So people, in order to check off the thing with the German Mail for all mark: Who can read, is still clear in the advantage! On the Suse homepage it is that this Mailinglist is in English. I assume times everyone announced itself in this type to the list. Thus also everyone has the conditions gelesesn. I can reconstruct thus not completely, what gives it here too mosern. Michael
On 24 Feb 00, at 8:13, Michael Lupp wrote:
So Leute,
um die Sache mit der deutschen Mail ein fur alle Mal abzuhaken:
Wer lesen kann, ist immer noch klar im Vorteil! Auf der Suse-Homepage steht, da? diese Mailinglist in englisch ist. Ich gehe mal davon aus, dass sich jeder auf diese Art zur Liste angemeldet hat. Also hat auch jeder die Bedingungen gelesesn.
Ich kann also nicht ganz nachvollziehen, was es hier zu mosern gibt.
My Translation: To clear the case of the german language mails for once and for ever. Whoever can read has the advantage. The SuSE homepage states that this ML is in english only. I expect most subscribers to have gotten to this ML through the homepage, therefore they should have read the terms. I do not know why people complain. ---------------------------------------------------------------------------------- My comments: For me this case had been cleared a while ago. There were some german language messages that were off topic. I suggest someone able to speak both english and whatever the non english language message was to translate and possibly add a comment if the message is off topic like this one is and if possible let the sender know that this is an english language ML and that the message was off topic by directly addressing him - not over the ML. By the way, the translation machines do not do a good job, as supposed. Thomas Michael Wanka 1080 Vienna, Austria Please treat my personal data confidential --------------------------------------------------- Progress (n.): The process through which Usenet has evolved from smart people in front of dumb terminals to dumb people in front of smart terminals.
On Tue, Feb 22, 2000, Rolf Haberrecker [rolf@suse.de] wrote: Well, I hope you understand my english, I'm trying my best ;) If I'm doing any false translation here, someone please correct. Here we go:
----- Forwarded message from Benjamin Pflugmann
----- Hi.
Ich wollte nur auf eine 'Fehlauslegung' des MySQL-Bugs hinweisen. Da die ACL von MySQL auch den Host beinhalten, von dem aus ein User kommt, muss man entweder einen Account finden, der fuer die ganze Welt freigeschaltet ist, oder Zugriff auf einen der in der ACL gelisteten Hosts haben.
I just wanted to point out a 'misinterpretation' of the MySQL-Bug. Since the ACL of MySQL contains also the host from which a user comes, you have to find either an account which is open to the whole world or have access to a host whicht is listed in the ACLs.
Sprich: Auf unserem eigenen Server koennten nur lokale User den Service missbrauchen, da er kein User mit einem remote host in den ACL vorkommt. Und lokalen Zugriff haben nur vertrauenswuerdige Leute.
Say: On our own server, only local users could abuse the service since there is no user with a remote host in the ACLs. And only trustworthy people have local access.
Der Bug ist also - entsprechende Einstellungen gemaess allgemeiner Systemsicherheit vorausgesetzt - zwar gravierend, aber nur halb so schlimm, wie es auf den ersten Blick scheinen mag.
So the bug is - provided that settings according to general system security have been made - in fact serious, but only half as worse as it seems at first sight.
Die entsprechende Empfehlung sollte IMHO also sein - vorausgesetzt man traut den Anwedern, die Shell-Zugriff auf den Server haben - alle Accounts abzuschalten, die Zugriff von non-trustet remote hosts erlauben.
The corresponding recommendations should IMHO be - provided that you trust the users whivh have shell access to the host - to disable all accounts which allow access from non-trusted hosts.
Tschuess,
Benjamin.
Bye, Benjamin
PS: Ich bin mit TcX in keiner Weise verbunden, ausser dass ich ein reger Nutzer von MySQL bin und spreche in diesem Fall auch nicht im Namen der SPiN GbmH.
PS: I am in no way related to TcX except that I actively use MySQL. I am also not speaking for SPiN GmbH in this matter.
participants (8)
-
Daniel L. Donahue
-
Hubert Mantel
-
Kilian Huber
-
Michael Lupp
-
Michael Sparks
-
Rolf Haberrecker
-
Sascha
-
Thomas Michael Wanka