March 2000 - openSUSE Users - openSUSE Mailing Lists

[SLE] Pointer on Jet Direct cards?
by hattons＠cpkwebser5.ncr.disa.mil 31 Mar '00

31 Mar '00

I have an HP LaserJet 4si/mx at work that I want to print to from my Linux Box I also want to allow NT clients to use my system as a print server. What is the best way to accomplish this. The printer has a JetDirect card in it. I could have all the users install the Jet Direct drivers directly on their NT boxes. I would rather not have everybody running their box as a print server. My understanding of NT printing is that the server provides the drivers to the clients when the clients print. Currently I have my NT box set up as a member server on the domain, and I have the HP JetDirect software installed on it. I then share the printer out to the other NT clients. What do I do in Linux to accomplish this? Is it easy? I'm only serving about 6 users. I want to remove NT and install a real OS, such as SuSE Linux. I don't want to leave my friend high and dry without a printer. I also don't have a lot of time to spend trying to figure this out. Any help will be greatly appreciated. TIA, Steve -- To unsubscribe send e-mail to suse-linux-e-unsubscribe(a)suse.com For additional commands send e-mail to suse-linux-e-help(a)suse.com Also check the FAQ at http://www.suse.com/Support/Doku/FAQ/

2 1

RE: [SLE] Attachments in this list
by kevin.jackson＠jhallpr.demon.co.uk 31 Mar '00

31 Mar '00

Sorry about saying not to send attachments... I was just getting peeved about not being able to read some emails. Kev -----Original Message----- From: François Pinard [mailto:pinard@iro.umontreal.ca] Sent: 31 March 2000 03:10 To: Kevin Jackson Cc: SuSE Linux List (E-mail) Subject: Re: [SLE] Attachments in this list Kevin Jackson <kevin.jackson(a)jhallpr.demon.co.uk> writes: > All I want to know is why are there a lot of attachments to emails... > Business cards, and the like. In general, you mean? Presumably because many people find them useful. > But... now and again I get ones which Exchange locks up because our Anti > Virus it is scanning it. I have the option to unlock it... but would > rather not. If the invoices contain viruses which are dangerous for you, you do well in keeping the lock. If your virus detector trips for nothing, however, maybe this may be seen as a problem with your virus scanner. > What are you trying to send to the list that will cause our anti virus > to lock emails? You should not allow yourself to think that anybody is specifically trying to do bad things to you... On average, we are liking people! :-) > I want to ask people to stop sending attachments. Are you serious? As long as attachments follow reasonable Internet standards, best would be to select tools which synergise well with them. Asking people to not use standards, because you cannot handle them, is not very productive. Another thing to consider is the lot of software, freely available, and often well written, which properly handles such standards. -- Franois Pinard http://www.iro.umontreal.ca/~pinard -- To unsubscribe send e-mail to suse-linux-e-unsubscribe(a)suse.com For additional commands send e-mail to suse-linux-e-help(a)suse.com Also check the FAQ at http://www.suse.com/Support/Doku/FAQ/ -- To unsubscribe send e-mail to suse-linux-e-unsubscribe(a)suse.com For additional commands send e-mail to suse-linux-e-help(a)suse.com Also check the FAQ at http://www.suse.com/Support/Doku/FAQ/

1 0

RE: [SLE] Attachments in this list
by kevin.jackson＠jhallpr.demon.co.uk 31 Mar '00

31 Mar '00

Did I say people are out there are out to get me... hey I'm not paranoid - or am I? hehehe. I do think I have a problem with our virus scanner - its crap. But, despite me being in the department that agrees with me, our paying directors don't think so! Kev -----Original Message----- From: François Pinard [mailto:pinard@iro.umontreal.ca] Sent: 31 March 2000 03:10 To: Kevin Jackson Cc: SuSE Linux List (E-mail) Subject: Re: [SLE] Attachments in this list Kevin Jackson <kevin.jackson(a)jhallpr.demon.co.uk> writes: > All I want to know is why are there a lot of attachments to emails... > Business cards, and the like. In general, you mean? Presumably because many people find them useful. > But... now and again I get ones which Exchange locks up because our Anti > Virus it is scanning it. I have the option to unlock it... but would > rather not. If the invoices contain viruses which are dangerous for you, you do well in keeping the lock. If your virus detector trips for nothing, however, maybe this may be seen as a problem with your virus scanner. > What are you trying to send to the list that will cause our anti virus > to lock emails? You should not allow yourself to think that anybody is specifically trying to do bad things to you... On average, we are liking people! :-) > I want to ask people to stop sending attachments. Are you serious? As long as attachments follow reasonable Internet standards, best would be to select tools which synergise well with them. Asking people to not use standards, because you cannot handle them, is not very productive. Another thing to consider is the lot of software, freely available, and often well written, which properly handles such standards. -- Franois Pinard http://www.iro.umontreal.ca/~pinard -- To unsubscribe send e-mail to suse-linux-e-unsubscribe(a)suse.com For additional commands send e-mail to suse-linux-e-help(a)suse.com Also check the FAQ at http://www.suse.com/Support/Doku/FAQ/ -- To unsubscribe send e-mail to suse-linux-e-unsubscribe(a)suse.com For additional commands send e-mail to suse-linux-e-help(a)suse.com Also check the FAQ at http://www.suse.com/Support/Doku/FAQ/

1 0

RE: [SLE] Attachments in this list
by kevin.jackson＠jhallpr.demon.co.uk 31 Mar '00

31 Mar '00

Its not the business card that stop it... I get too many as it is. Just wondering why it keeps locking certain peoples emails! Kev -----Original Message----- From: Rogier Maas [mailto:icarus@guldennet.nl] Sent: 30 March 2000 22:35 To: Kevin Jackson Cc: SuSE Linux Mailing List Subject: Re: [SLE] Attachments in this list Kevin Jackson wrote: > > I use Outlook on our NT Exchange Email system to send/receive email - a very > common set up in any company using NT. > We also use Dr Solomon/McAffee Anti Virus on the Exchange server. > Before anyone says this is a Linux list - I'm not stupid. > All I want to know is why are there a lot of attachments to emails... > Business cards, and the like. > But... now and again I get ones which Exchange locks up because our Anti > Virus it is scanning it. I have the > option to unlock it... but would rather not. > What are you trying to send to the list that will cause our anti virus to > lock emails? > I'm one of the systems administrators here and know exactly why Exchange > does this - I want to ask people to stop sending attachments. Why would a virusscanner ever want to stop businesscards from coming in? If your virusscanner misinterprets businesscards as being virii and therefore won't let them through, get another virusscanner! It's faulty! Rogier -- To unsubscribe send e-mail to suse-linux-e-unsubscribe(a)suse.com For additional commands send e-mail to suse-linux-e-help(a)suse.com Also check the FAQ at http://www.suse.com/Support/Doku/FAQ/

1 0

[SLE] Network printer server?
by alex＠daniloff.com 31 Mar '00

31 Mar '00

Hello Linux folks! I saw in computer store network printer server for $150. It can connect three LPT printers. Are these network printer servers OS dependent? Will a such printer server work with Linux or not? Thanks for any information, Alex -- To unsubscribe send e-mail to suse-linux-e-unsubscribe(a)suse.com For additional commands send e-mail to suse-linux-e-help(a)suse.com Also check the FAQ at http://www.suse.com/Support/Doku/FAQ/

2 1

[SLE] kreatecd local root compromise
by xxpsychosurferxx＠hotmail.com 31 Mar '00

31 Mar '00

Hello I am not sure if this had been published is so im sorry but while searching on some security sites i found this advisory and root exploit for suse 6.* This is not mine and i do not take credit for it. L0ki =================== TESO Security Advisory 2000/03/14 kreatecd local root compromise Summary =================== A vulnerability within the kreatecd application for Linux has been discovered. An attacker can gain local root-access. Systems Affected =================== Any system which has kreatecd installed as set-UID root. This affects also a configure; make; make install procedure. Among the vulnerable distributions (if the package is installed) are the following systems: Halloween Linux Version 4 SuSE 6.x Tests =================== [stealth@liane stealth]$ stat `which kreatecd` File: "/usr/bin/kreatecd" Size: 229068 Filetype: Regular File Mode: (4755/-rwsr-xr-x) Uid: ( 0/ root) Gid: ( 0/ root) Device: 3,1 Inode: 360053 Links: 1 Access: Tue Mar 14 14:48:21 2000(00000.00:00:45) Modify: Tue Mar 14 14:48:21 2000(00000.00:00:45) Change: Tue Mar 14 14:48:21 2000(00000.00:00:45) [stealth@liane stealth]$ id uid=500(stealth) gid=500(stealth) groups=500(stealth) [stealth@liane stealth]$ /tmp/kreatur (... some diagnostic messages ...) Creating suid-maker... Creating boom-shell... Execute kreatecd and follow the menus: Configure -> Paths -- change the path for cdrecord to /tmp/xxx Apply -> OK Configure -> SCSI -> OK Execute /tmp/boomsh BEHAVE! (poking around with GUI...) [stealth@liane stealth]$ /tmp/boomsh [root@liane stealth]# id uid=0(root) gid=500(stealth) groups=500(stealth) [root@liane stealth]# Impact =================== An attacker may gain local root-access to a system where vulnerable kreatecd package is installed. It might be difficult for an remote- attacker who gained local user-access due to the GUI-nature of the vulnerable program. I appreciate help with some tips how one can get an instant rootshell without clicking around. Explanation =================== Kreatecd which runs with the saved user-id of 0 blindly trusts path's to cd-recording software given by unprivileged user. It then invokes this software with EUID of 0 when user just clicks a little bit around with the menus. Solution =================== The author and the distributor has been informed before. Remove the suid bit of kreatecd. Acknowledgments ================ The bug-discovery and the demonstration programs are due to S. Krahmer [1]. This advisory has been written by S. Krahmer. Contact Information =================== The TESO crew can be reached by mailing to teso(a)coredump.cx. Our web page is at https://teso.scene.at/ C-Skills developers may be reached through [1]. References =================== [1] S. Krahmer, C-Skills http://www.cs.uni-potsdam.de/homepages/students/linuxer/ [2] TESO http://teso.scene.at or https://teso.scene.at/ Disclaimer =================== This advisory does not claim to be complete or to be usable for any purpose. Especially information on the vulnerable systems may be inaccurate or wrong. The supplied exploit is not to be used for malicious purposes, but for educational purposes only. This advisory is free for open distribution in unmodified form. Articles that are based on information from this advisory should include link [1] and [2]. Exploit =================== We've created a working demonstration program to exploit the vulnerability. The exploit is available from http://teso.scene.at/ or https://teso.scene.at/ and http://www.cs.uni-potsdam.de/homepages/students/linuxer <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN"> <HEAD> <META content="text/html; charset=iso-8859-1" http-equiv=Content-Type> <META content="MSHTML 5.00.2920.0" name=GENERATOR> <STYLE></STYLE> </HEAD> <BODY bgColor=#ffffff> <DIV><FONT face=Arial size=2>Hello</FONT></DIV> <DIV> </DIV> <DIV><FONT face=Arial size=2>I am not sure if this had been published is so im sorry but while searching on some security sites i found this advisory and root exploit for suse 6.*</FONT></DIV> <DIV><FONT face=Arial size=2>This is not mine and i do not take credit for it.</FONT></DIV> <DIV> </DIV> <DIV><FONT face=Arial size=2>L0ki</FONT></DIV> <DIV><FONT face=Arial size=2></FONT> </DIV> <DIV><FONT face=Arial size=2>===================</FONT></DIV> <DIV> </DIV> <DIV><FONT face=Arial size=2>TESO Security Advisory2000/03/14 </FONT></DIV> <DIV> </DIV> <DIV><FONT face=Arial size=2>kreatecd local root compromise</FONT></DIV> <DIV> </DIV> <DIV><FONT face=Arial size=2>Summary<BR>===================</FONT></DIV> <DIV> </DIV> <DIV><FONT face=Arial size=2> A vulnerability within the kreatecd application for Linux has been discovered. An attacker can gain local root-access.</FONT></DIV> <DIV> </DIV> <DIV><FONT face=Arial size=2>Systems Affected===================</FONT></DIV> <DIV> </DIV> <DIV><FONT face=Arial size=2> Any system which has kreatecd installed as set-UID root. This affects also a configure; make; make install procedure.</FONT></DIV> <DIV> </DIV> <DIV><FONT face=Arial size=2> Among the vulnerable distributions (if the package is installed) are the following systems:</FONT></DIV> <DIV> </DIV> <DIV><FONT face=Arial size=2> Halloween Linux Version 4 SuSE 6.x</FONT></DIV> <DIV> </DIV> <DIV><FONT face=Arial size=2>Tests<BR>===================</FONT></DIV> <DIV> </DIV> <DIV><FONT face=Arial size=2> [stealth@liane stealth]$ stat `which kreatecd` File: "/usr/bin/kreatecd" Size: 229068 Filetype: Regular File Mode: (4755/-rwsr-xr-x) Uid: ( 0/ root) Gid: ( 0/ root) Device: 3,1 Inode: 360053 Links: 1 Access: Tue Mar 14 14:48:21 2000(00000.00:00:45) Modify: Tue Mar 14 14:48:21 2000(00000.00:00:45) Change: Tue Mar 14 14:48:21 2000(00000.00:00:45) [stealth@liane stealth]$ id uid=500(stealth) gid=500(stealth) groups=500(stealth) [stealth@liane stealth]$ /tmp/kreatur (... some diagnostic messages ...) Creating suid-maker...<BR> Creating boom-shell...</FONT></DIV> <DIV> </DIV> <DIV><FONT face=Arial size=2> Execute kreatecd and follow the menus: Configure -> Paths -- change the path for cdrecord to /tmp/xxx Apply -> OK<BR> Configure -> SCSI -> OK</FONT></DIV> <DIV> </DIV> <DIV><FONT face=Arial size=2> Execute /tmp/boomsh</FONT></DIV> <DIV> </DIV> <DIV><FONT face=Arial size=2> BEHAVE! <BR> (poking around with GUI...) [stealth@liane stealth]$ /tmp/boomsh [root@liane stealth]# id<BR> uid=0(root) gid=500(stealth) groups=500(stealth) [root@liane stealth]#</FONT></DIV> <DIV> </DIV> <DIV><FONT face=Arial size=2>Impact<BR>===================</FONT></DIV> <DIV> </DIV> <DIV><FONT face=Arial size=2> An attacker may gain local root-access to a system where vulnerable kreatecd package is installed. It might be difficult for an remote- attacker who gained local user-access due to the GUI-nature of the vulnerable program.<BR> I appreciate help with some tips how one can get an instant rootshell without clicking around.<BR> </FONT></DIV> <DIV> </DIV> <DIV><FONT face=Arial size=2>Explanation===================</FONT></DIV> <DIV> </DIV> <DIV><FONT face=Arial size=2> Kreatecd which runs with the saved user-id of 0 blindly trusts path's to cd-recording software given by unprivileged user. It then invokes this software with EUID of 0 when user just clicks a little bit around with the menus.</FONT></DIV> <DIV> </DIV> <DIV><FONT face=Arial size=2>Solution<BR>===================</FONT></DIV> <DIV> </DIV> <DIV><FONT face=Arial size=2> The author and the distributor has been informed before. Remove the suid bit of kreatecd.</FONT></DIV> <DIV> </DIV> <DIV><FONT face=Arial size=2>Acknowledgments<BR>================</FONT></DIV> <DIV> </DIV> <DIV><FONT face=Arial size=2> The bug-discovery and the demonstration programs are due to S. Krahmer [1]. This advisory has been written by S. Krahmer.</FONT></DIV> <DIV> </DIV> <DIV><FONT face=Arial size=2>Contact Information===================</FONT></DIV> <DIV> </DIV> <DIV><FONT face=Arial size=2> The TESO crew can be reached by mailing to <A href="mailto:teso@coredump.cx">teso(a)coredump.cx</A>. Our web page is at <A href="https://teso.scene.at/">https://teso.scene.at/</A> C-Skills developers may be reached through [1].</FONT></DIV> <DIV> </DIV> <DIV><FONT face=Arial size=2>References<BR>===================</FONT></DIV> <DIV> </DIV> <DIV><FONT face=Arial size=2> [1] S. Krahmer, C-Skills <A href="http://www.cs.uni-potsdam.de/homepages/students/linuxer/">http://www.cs.uni-potsdam.de/homepages/students/linuxer/</A></FONT></DIV> <DIV> </DIV> <DIV><FONT face=Arial size=2> [2] TESO <A href="http://teso.scene.at">http://teso.scene.at</A> or <A href="https://teso.scene.at/">https://teso.scene.at/</A> </FONT></DIV> <DIV> </DIV> <DIV><FONT face=Arial size=2>Disclaimer===================</FONT></DIV> <DIV> </DIV> <DIV><FONT face=Arial size=2> This advisory does not claim to be complete or to be usable for any purpose. Especially information on the vulnerable systems may be inaccurate or wrong. The supplied exploit is not to be used for malicious purposes, but for educational purposes only.</FONT></DIV> <DIV> </DIV> <DIV><FONT face=Arial size=2> This advisory is free for open distribution in unmodified form. Articles that are based on information from this advisory should include link [1] and [2].</FONT></DIV> <DIV> </DIV> <DIV><FONT face=Arial size=2>Exploit<BR>===================</FONT></DIV> <DIV> </DIV> <DIV><FONT face=Arial size=2> We've created a working demonstration program to exploit the vulnerability.</FONT></DIV> <DIV> </DIV> <DIV><FONT face=Arial size=2> The exploit is available from</FONT></DIV> <DIV> </DIV> <DIV><FONT face=Arial size=2> <A href="http://teso.scene.at/">http://teso.scene.at/</A> or <A href="https://teso.scene.at/">https://teso.scene.at/</A></FONT></DIV> <DIV> </DIV> <DIV><FONT face=Arial size=2> and <BR> <A href="http://www.cs.uni-potsdam.de/homepages/students/linuxer">http://www.cs.uni-potsdam.de/homepages/students/linuxer</A></FONT></DIV></BODY> <HR> <UL> <LI>application/octet-stream attachment: kreatur.pl </UL> -- To unsubscribe send e-mail to suse-linux-e-unsubscribe(a)suse.com For additional commands send e-mail to suse-linux-e-help(a)suse.com Also check the FAQ at http://www.suse.com/Support/Doku/FAQ/

1 0

[SLE] Unsubscribe from another account
by jsabatke＠execpc.com 31 Mar '00

31 Mar '00

I know this appeared on one of the email groups I belong to. I need to know how to unsubscribe from an account where I can no longer send mail outside of the firewall. TIA -- Jim Sabatke SuSE 6.3 Linux Kernel - 2.2.13 All work and no play makes Jack a dull boy. All work and no play makes Jack a dull boy. All work and no play makes Jack a dull boy. All work and no play makes Jack a dull boy. All work and no play makes Jack a dull boy. All work and no play makes Jack a dull boy. All work and no play makes Jack a dull boy. All work and no play makes Jack a dull boy. -- To unsubscribe send e-mail to suse-linux-e-unsubscribe(a)suse.com For additional commands send e-mail to suse-linux-e-help(a)suse.com Also check the FAQ at http://www.suse.com/Support/Doku/FAQ/

2 1

Re: [SLE] Remote YAST keys
by pinard＠iro.umontreal.ca 31 Mar '00

31 Mar '00

"Craig Sharp" <cashar(a)Roushind.com> writes: > I am trying to run Yast remotely. It runs fine until I need to use the > function keys. They just plain dont work. Use `1' instead of `F1', `2' instead of `F2', etc. and `0' instead of `F10'. -- François Pinard http://www.iro.umontreal.ca/~pinard -- To unsubscribe send e-mail to suse-linux-e-unsubscribe(a)suse.com For additional commands send e-mail to suse-linux-e-help(a)suse.com Also check the FAQ at http://www.suse.com/Support/Doku/FAQ/

1 0

Re: [SLE] Attachments in this list
by pinard＠iro.umontreal.ca 31 Mar '00

31 Mar '00

Kevin Jackson <kevin.jackson(a)jhallpr.demon.co.uk> writes: > All I want to know is why are there a lot of attachments to emails... > Business cards, and the like. In general, you mean? Presumably because many people find them useful. > But... now and again I get ones which Exchange locks up because our Anti > Virus it is scanning it. I have the option to unlock it... but would > rather not. If the invoices contain viruses which are dangerous for you, you do well in keeping the lock. If your virus detector trips for nothing, however, maybe this may be seen as a problem with your virus scanner. > What are you trying to send to the list that will cause our anti virus > to lock emails? You should not allow yourself to think that anybody is specifically trying to do bad things to you... On average, we are liking people! :-) > I want to ask people to stop sending attachments. Are you serious? As long as attachments follow reasonable Internet standards, best would be to select tools which synergise well with them. Asking people to not use standards, because you cannot handle them, is not very productive. Another thing to consider is the lot of software, freely available, and often well written, which properly handles such standards. -- François Pinard http://www.iro.umontreal.ca/~pinard -- To unsubscribe send e-mail to suse-linux-e-unsubscribe(a)suse.com For additional commands send e-mail to suse-linux-e-help(a)suse.com Also check the FAQ at http://www.suse.com/Support/Doku/FAQ/

1 0

[SLE] Mozilla Jpeg Issue
by samw＠wwa.com 31 Mar '00

31 Mar '00

Has anyone worked out a quick and stable solution from SuSE 6.3 that would allow the display of jpegs within the Mozilla Browser? Currently, redhat supports this function properly, but SuSE does not. I wanted to check before I spent time re-inventing the wheel. Will or does, SuSE 6.4 support jpeg display in Mozilla out of the box? Sam Williams....................................................samurai(a)acm.org Senior Software Engineer...........................................samw(a)wwa.com Chairman, Rock River Linux Users Group................rrlug(a)linux.rockriver.net ------------------------------------------------------------------------------- Conversation enriches the understanding, but solitude is the school of Genius Gibbon Linux Users Register Yourself or Machine....... Stand Up and be counted http://counter.li.org -- To unsubscribe send e-mail to suse-linux-e-unsubscribe(a)suse.com For additional commands send e-mail to suse-linux-e-help(a)suse.com Also check the FAQ at http://www.suse.com/Support/Doku/FAQ/

3 2