ru.linux

 
 - RU.LINUX ---------------------------------------------------------------------
 From : Sergey Lentsov                       2:4615/71.10   07 Jun 2001  17:16:27
 To : All
 Subject : URL: http://lwn.net/2001/0607/security.php3
 -------------------------------------------------------------------------------- 
 

    [1][LWN Logo] 
    
                                [2]Click Here 
    [LWN.net]
    
    Sections:
     [3]Main page
     Security
     [4]Kernel
     [5]Distributions
     [6]On the Desktop
     [7]Development
     [8]Commerce
     [9]Linux in the news
     [10]Announcements
     [11]Linux History
     [12]Letters
    [13]All in one big page
    
    See also: [14]last week's Security page.
    
 Security
 
 News and Editorials
 
    Kaladix Linux - Paranoid Security Linux Distribution.
    [15]Kaladix Linux showed up on [16]Freshmeat on June 1st, describing
    itself as a "Paranoid Security Linux Distribution". It is based on
    [17]LinuxFromScratch (LFS) with mandatory access controls and access
    control lists enabled ([18]RSBAC). Also to be included are
    [19]Openwall, [20]FormatGuard and other similar patches.
    
    They have just barely gotten started, with a 0.3 release expected out
    soon. Note that the license for Kaladix is listed as "Free for
    non-commercial use". "I am aware that it is not possible to relicense
    GPL licensed software. Taking into respect that I do not like
    companies that make money from my work, I thought of licensing Kaladix
    Linux free for non-commercial use according to the following
    assumption: Every single piece of software that is included in Kaladix
    Linux is still licensed under GPL and may be used by whomsoever for
    whatsoever. However, the creation of configuration files, the
    compilation of software packages, my worktime and other various
    aspects of Kaladix Linux is my service (work) so that I can choose
    whatever license I wish and can thus assume to be able to distribute
    Kaladix Linux under a free for non-commercial use license".
    
    Interview with Wietse Venema about his tcp_wrappers license (BSD
    Today). Fun with licensing continued this week with a look at the
    license for tcp_wrappers. BSD Today interviewed [21]Wietse Venema,
    tcp_wrappers author, about its license, which original read, "If
    someone wants to redistribute the TCP Wrapper code in a manner that is
    not covered by the Copyright notice, then they are expected to contact
    me. I am a nice person and I haven't refused permission to anyone
    yet."
    
    After discussion with many different people, Wietse has updated the
    license to read, "Redistribution and use in source and binary forms,
    with or without modification, are permitted provided that this entire
    copyright notice is duplicated in all such copies".
    
    A nice, simple answer to a licensing problem. Would that all of them
    could be resolved so quickly and cleanly!
    
    Happy Birthday, PGP. PGP author Phil Zimmerman marked the [22]10 year
    anniversary of the release of PGP 1.0 on Tuesday, June 5th. "It was on
    this day in 1991 that I sent the first release of PGP to a couple of
    my friends for uploading to the Internet". It quickly grew faster than
    he had ever dreamed possible. "Volunteers from around the world were
    clamoring to help me port it to other platforms, add enhancements, and
    generally promote it".
    
    The anniversary is also covered in [23]this Wired article by Declan
    McCullagh
    
 Security Reports
 
    OpenSSH tmplink vulnerability.
    A [24]tmplink vulnerability has been reported in OpenSSH when X
    forwarding is enabled on both the client and the server. It has been
    [25]reported fixed in the OpenSSH CVS development tree, but is not yet
    mentioned in the [26]OpenBSD 2.9 errata page. Until an updated version
    of OpenSSH is made available, disabling X forwarding for both the
    client and server might be a good idea.
    
    Sendmail multiple race condition vulnerabilities.
    Michal Zalewski issued [27]a paper describing race conditions in
    sendmail's signal handlers. As a result, sendmail 8.11.4 and
    8.12.0.Beta10 have been released with fixes for these problems. Check
    [28]2794 for additional details. No distribution updates for this
    problem have been reported so far.
    
      * [29]Slackware (from the Changelogs)
        
    man malicious cache file creation vulnerability. Yet more trouble for
    the beleaguered man command. This week, a [30]new vulnerability was
    reported in which files are cached in the system cache directory from
    outside of the system manual page hierarchy search path. It is
    believed that this can be used together with man, mandb or any other
    utility which trusts cached filenames in order to gain elevated
    privileges. A workaround is to eliminate the setuid bit from the
    'mandb' binary (not the wrapper).
    
    xinetd default umask vulnerability.
    Red Hat issued [31]an advisory this week reporting that the default
    umask for xinetd in Red Hat 7.0 and 7.1 was set to zero. As a result,
    some daemons started from xinetd that did not set their own
    permissions were creating world-writable files. The default umask has
    been set instead to 022. No information has been posted yet on whether
    this problem is specific to Red Hat or shows up in other distributions
    (though Red Hat-based distributions are likely vulnerable).
    
    ispell symbolic link vulnerabilities. OpenBSD released patches to fix
    problems in ispell where the use of mktemp() (instead of mkstemp())
    left it vulnerable to symlink attacks. The patches also modify the use
    of gets() to use fgets() instead.
    
      * [32]Red Hat
        
    Qualcomm qpopper username buffer overflow.
    A [33]buffer overflow was introduced into Qualcomm qpopper 4.0, 4.0.2
    and 4.0.2 as a result of the way in which the client-supplied username
    is handled. As a result, a remote root attack is possible. An upgrade
    to 4.0.3 is strongly recommended.
    
    Horde IMP Message Attachment symbolic link vulnerability.
    [34]A symbolic link vulnerability has been reported in the Horde Imp
    versions prior to 2.2.5. The vulnerability comes from the use of the
    PHP tempnam function for creating temporary files. Prior to PHP 4.0.5,
    tempnam used mktemp for creating temporary files instead of mkstemp.
    Upgrading to Imp 2.2.5 and PHP 4.0.5 is recommended.
    
    fvwm initialization script vulnerability.
    If no $HOME environment variable is set, fvwm may read the .fvwm2rc
    from the current directory instead of from the home directory, making
    it possible for a local attacker to execute commands as another user.
    fvwm-2.2.5 fixes this issue.
    
      * [35]Slackware (from the Changelog)
        
    OpenBSD Dup2 VFS Race Condition Denial Of Service Vulnerability.
    It has been reported that a local user can cause a kernel panic on
    OpenBSD if a file descriptor shared by two processes is set to null by
    one process while the other process is asleep. This can be used to
    facilitate a local denial-of-service attack. All versions of OpenBSD
    are reportedly vulnerable. No confirmation or advisory for the problem
    has been posted on the [36]OpenBSD site as of yet.
    
    Acme.Serve 1.7 arbitrary file access vulnerability.
    [37]Acme.serve is a Java class that contains a small, embeddable HTML
    browser. By default, Acme.Serve 1.7 allows all connections to browse
    the entire filesystem. No fix for the problem has been reported so
    far. Check BugTraq ID [38]2809 for more details.
    
    Proprietary products.
    The following proprietary products were reported to contain
    vulnerabilities:
      * [39]Spearhead Security NetGAP Internet appliance has been reported
        to contain a vulnerability in which URLs can be encoded in a
        manner that bypasses the filtering mechanism. No vendor response
        has been posted so far.
        
 Updates
 
    gnupg format string vulnerability.
    Check the [40]May 31st LWN Security Summary for the initial report.
    gnupg 1.0.5 and earlier are vulnerable; gnupg 1.0.6 contains a fix for
    this problem and an upgrade is recommended. Werner Koch also sent out
    [41]a note warning of minor build programs with gnupg 1.0.6 when
    compiled without gcc.
    
    This week's updates:
      * [42]Linux-Mandrake
      * [43]Immunix
      * [44]Trustix
      * [45]SuSE
        
    Previous updates:
      * [46]Engarde (May 31st)
      * [47]Progeny (May 31st)
        
    Webmin environment variable inheritance vulnerability. Check the
    [48]May 31st LWN Security Summary for the original report.
    
    This week's updates:
      * [49]Caldera, updated packages now available
        
    Previous updates:
      * [50]Caldera, disabling Webmin recommended, no updated packages
        available yet. (May 31st)
        
    MIT Kerberos FTP daemon buffer overflows.
    Check the [51]May 24th LWN Security Summary for the initial report.
    MIT Kerberos 5, all versions, is affected. If anonymous ftp is
    enabled, a remote root exploit is possible. Otherwise, a local root
    exploit or a remote root exploit via an authorized login is still
    possible.
    
    This week's updates:
      * [52]Immunix
        
    Previous reports:
      * [53]Red Hat (May 24th)
        
    Red Hat update to mktemp.
    Check the [54]May 24th LWN Security Summary for the initial report.
    This problem is specific to Red Hat Linux prior to version 7 (and
    other distributions based on Red Hat).
    
    This week's updates:
      * [55]Immunix
        
    Previous updates:
      * [56]Red Hat
        
    man -S heap overflow.
    Check the [57]May 17th LWN Security Summary for the initial report.
    The exploitability is definitely on whether or not the man command is
    installed setgid group man.
    
    This week's updates:
      * [58]Immunix
        
    Previous updates:
      * [59]Red Hat (May 24th)
        
 Resources
 
    Linux Intrusion Detection System (LIDS) 1.0.9 for 2.4.5. [60]LIDS
    1.0.9 has been ported over to the 2.4.5 kernel and includes a few
    other minor bugfixes.
    
    oftpd - a secure anonymous FTP server. [61]oftpd is an anonymous FTP
    server specifically designed for security. Author Shane Kerr sent us
    [62]a note describing some of its features and explaining why he chose
    to implement only anonymous ftp access. "Non-anonymous FTP is a
    security risk, despite certain FTP extensions that support encryption
    via SSL or other mechanisms. As used most commonly FTP is a
    fundamentally flawed protocol, in that it sends passwords in the
    clear. Because of this I suggest that no matter how secure you make
    your server software, FTP should be avoided for data transfer,
    especially since excellent alternatives such as SSH are available".
    
    The first stable release of oftpd occurred [63]in March. The most
    recent release is [64]0.3.5, a development release made in mid-April.
    
    Research Paper - ICMP Usage In Scanning v3.0. Ofir Arkin has released
    [65]version 3 (PDF) of his paper entitled "ICMP Usage In Scanning".
    
 Events
 
    Upcoming Security Events.
    
    Date Event Location
    June 7 - 8, 2001 [66]TISC 2001 Los Angeles, CA, USA
    June 11 - 13, 2001 [67]7th Annual Information Security Conference:
    Securing the Infocosm: Security, Privacy and Risk Orlando, FL, USA.
    June 17 - 22, 2001 [68]13th Annual Computer Security Incident Handling
    Conference (FIRST 2001) Toulouse, France
    June 18 - 20, 2001 [69]NetSec Network Security Conference(NetSec '01)
    New Orleans, Louisiana, USA.
    June 19 - 20, 2001 [70]The Biometrics Symposium Chicago, Illinois,
    USA.
    June 19 - 21, 2001 [71]PKI Forum Members Meeting (Kempinski Hotel
    Airport Munchen)Munich, Germany
    July 11 - 12, 2001 [72]Black Hat Briefings USA '01 Las Vegas, Nevada,
    USA.
    August 7, 2001 [73]CIBC World Markets First Annual Security & Privacy
    Conference New York, NY, USA.
    
    For additional security-related events, included training courses
    (which we don't list above) and events further in the future, check
    out Security Focus' [74]calendar, one of the primary resources we use
    for building the above list. To submit an event directly to us, please
    send a plain-text message to [75]lwn@lwn.net.
    
    Section Editor: [76]Liz Coolbaugh
    June 7, 2001
    
                               [77]Click Here 
    Secured Distributions:
    [78]Engarde Secure Linux
    [79]Immunix
    [80]Nexus
    [81]NSA Security Enhanced
    [82]Openwall GNU/Linux
    [83]SLinux
    [84]Trustix
    Security Projects
    [85]Bastille
    [86]Linux Security Audit Project
    [87]Linux Security Module
    [88]OpenSSH
    Security List Archives
    [89]Bugtraq Archive
    [90]Firewall Wizards Archive
    [91]ISN Archive
    Distribution-specific links
    [92]Caldera Advisories
    [93]Conectiva Updates
    [94]Debian Alerts
    [95]Kondara Advisories
    [96]Esware Alerts
    [97]LinuxPPC Security Updates
    [98]Mandrake Updates
    [99]Red Hat Errata
    [100]SuSE Announcements
    [101]Yellow Dog Errata
    BSD-specific links
    [102]BSDi
    [103]FreeBSD
    [104]NetBSD
    [105]OpenBSD
    Security mailing lists [106]Caldera
    [107]Cobalt
    [108]Conectiva
    [109]Debian
    [110]Esware
    [111]FreeBSD
    [112]Kondara
    [113]LASER5
    [114]Linux From Scratch
    [115]Linux-Mandrake
    [116]NetBSD
    [117]OpenBSD
    [118]Red Hat
    [119]Slackware
    [120]Stampede
    [121]SuSE
    [122]Trustix
    [123]turboLinux
    [124]Yellow Dog
    Security Software Archives
    [125]munitions
    [126]ZedZ.net (formerly replay.com)
    Miscellaneous Resources
    [127]CERT
    [128]CIAC
    [129]Comp Sec News Daily
    [130]Crypto-GRAM
    [131]LinuxLock.org
    [132]LinuxSecurity.com
    [133]OpenSEC
    [134]Security Focus
    [135]SecurityPortal
    
    
                                                         [136]Next: Kernel
    
    [137]Eklektix, Inc. Linux powered! Copyright Л 2001 [138]Eklektix,
    Inc., all rights reserved
    Linux (R) is a registered trademark of Linus Torvalds
 
 References
 
    1. http://lwn.net/
    2. http://ads.tucows.com/click.ng/pageid=001-012-132-000-000-002-000-000-012
    3. http://lwn.net/2001/0607/
    4. http://lwn.net/2001/0607/kernel.php3
    5. http://lwn.net/2001/0607/dists.php3
    6. http://lwn.net/2001/0607/desktop.php3
    7. http://lwn.net/2001/0607/devel.php3
    8. http://lwn.net/2001/0607/commerce.php3
    9. http://lwn.net/2001/0607/press.php3
   10. http://lwn.net/2001/0607/announce.php3
   11. http://lwn.net/2001/0607/history.php3
   12. http://lwn.net/2001/0607/letters.php3
   13. http://lwn.net/2001/0607/bigpage.php3
   14. http://lwn.net/2001/0531/security.php3
   15. http://www.maganation.com/~kaladix/
   16. http://freshmeat.net/
   17. http://www.linuxfromscratch.org/
   18. http://www.rsbac.org/
   19. http://www.openwall.com/
   20. http://www.immunix.org/formatguard.html
   21. http://www.bsdtoday.com/2001/June/Features496.html
   22. http://lwn.net/2001/0607/a/pgp.php3
   23. http://www.wired.com/news/privacy/0,1848,44324,00.html
   24.
 http://securityfocus.com/frames/?content=/templates/archive.pike%3Ftid%3D188739%
 26fromthread%3D0%26list%3D1%26threads%3D1%26start%3D2001-06-03%26end%3D2001-06-0
 9%26
   25. http://lwn.net/2001/0607/a/opensshcvs.php3
   26. http://www.openbsd.org/errata.html
   27. http://www.securityfocus.com/advisories/3328
   28. http://www.securityfocus.com/bid/2794
   29. http://www.slackware.com/changelog/current.php?cpu=i386
   30. http://www.securityfocus.com/bid/2815
   31. http://lwn.net/2001/0607/a/rh-xinetd.php3
   32. http://lwn.net/2001/0607/a/rh-ispell.php3
   33. http://www.securityfocus.com/bid/2811
   34. http://www.securityfocus.com/bid/2805
   35. http://www.slackware.com/changelog/current.php?cpu=i386
   36. http://www.openbsd.org/security.html
   37. http://www.acme.com/java/software/Acme.Serve.Serve.html
   38. http://www.securityfocus.com/bid/2809
   39. http://www.securityfocus.com/bid/2798
   40. http://lwn.net/2001/0531/security.php3#gnupgformatstring
   41. http://lwn.net/2001/0607/a/gnupggcc.php3
   42. http://lwn.net/2001/0607/a/lm-gnupg.php3
   43. http://lwn.net/2001/0607/a/im-gnupg.php3
   44. http://lwn.net/2001/0607/a/trustix-gnupg.php3
   45. http://lwn.net/2001/0607/a/suse-gnupg.php3
   46. http://lwn.net/2001/0531/a/esl-gnupg.php3
   47. http://lwn.net/2001/0531/a/pr-gnupg.php3
   48. http://lwn.net/2001/0531/security.php3#webmin
   49. http://lwn.net/2001/0607/a/caldera-webmin.php3
   50. http://lwn.net/2001/0531/a/caldera-webmin.php3
   51. http://lwn.net/2001/0524/security.php3#kerberosftp
   52. http://lwn.net/2001/0607/a/im-kerberos.php3
   53. http://lwn.net/2001/0524/a/rh-kerberos.php3
   54. http://lwn.net/2001/0524/security.php3#rhmktemp
   55. http://lwn.net/2001/0607/a/im-man.php3
   56. http://lwn.net/2001/0607/a/rh-mktemp.php3
   57. http://lwn.net/2001/0517/security.php3#manheap
   58. http://lwn.net/2001/0607/a/im-man.php3
   59. http://lwn.net/2001/0524/a/rh-man.php3
   60. http://freshmeat.net/releases/49524/
   61. http://www.time-travellers.org/oftpd
   62. http://lwn.net/2001/0607/a/oftpd.php3
   63. http://freshmeat.net/releases/24041/
   64. http://freshmeat.net/releases/46015/
   65. http://www.sys-security.com/archive/papers/ICMP_Scanning_v3.0.pdf
   66. http://www.tisc2001.com/
   67.
 http://www.gartner.com/IndexHomePage.jsp?landPage=/2_events/conferences_briefing
 s/conferences/sec7.jsp
   68. http://www.first.org/conference/2001/
   69. http://www.gocsi.com/netsec01
   70.
 http://www.iqpc.com/cgi-bin/templates/98485262029583740234300003/genevent.html?e
 vent=1504&topic=
   71. http://www.pkiforum.org/meetings/20010619/index.html
   72. http://www.blackhat.com/
   73. http://www.cibcwm.com/eq/conference/security/
   74. http://securityfocus.com/calendar
   75. mailto:lwn@lwn.net
   76. mailto:lwn@lwn.net
   77. http://ads.tucows.com/click.ng/buttonpos=lwnbuttonsecurity
   78. http://www.engardelinux.org/
   79. http://www.immunix.org/
   80. http://Nexus-Project.net/
   81. http://www.nsa.gov/selinux/
   82. http://www.openwall.com/Owl/
   83. http://www.slinux.org/
   84. http://www.trustix.com/
   85. http://www.bastille-linux.org/
   86. http://lsap.org/
   87. http://lsm.immunix.org/
   88. http://www.openssh.com/
   89. http://www.securityfocus.com/bugtraq/archive/
   90. http://www.nfr.net/firewall-wizards/
   91. http://www.jammed.com/Lists/ISN/
   92. http://www.calderasystems.com/support/security/
   93. http://www.conectiva.com.br/atualizacoes/
   94. http://www.debian.org/security/
   95. http://www.kondara.org/errata/k12-security.html
   96. http://www.esware.com/actualizaciones.html
   97. http://linuxppc.org/security/advisories/
   98. http://www.linux-mandrake.com/en/fupdates.php3
   99. http://www.redhat.com/support/errata/index.html
  100. http://www.suse.de/security/index.html
  101. http://www.yellowdoglinux.com/resources/errata.shtml
  102. http://www.BSDI.COM/services/support/patches/
  103. http://www.freebsd.org/security/security.html
  104. http://www.NetBSD.ORG/Security/
  105. http://www.openbsd.org/security.html
  106. http://www.calderasystems.com/support/forums/announce.html
  107. http://www.cobalt.com/support/resources/usergroups.html
  108. http://distro.conectiva.com.br/atualizacoes/
  109. http://www.debian.org/MailingLists/subscribe
  110. http://www.esware.com/lista_correo.html
  111. http://www.freebsd.org/handbook/eresources.html#ERESOURCES-MAIL
  112. http://www.kondara.org/mailinglist.html.en
  113. http://l5web.laser5.co.jp/ml/ml.html
  114. http://www.linuxfromscratch.org/services/mailinglistinfo.php
  115. http://www.linux-mandrake.com/en/flists.php3
  116. http://www.netbsd.org/MailingLists/
  117. http://www.openbsd.org/mail.html
  118. http://www.redhat.com/mailing-lists/
  119. http://www.slackware.com/lists/
  120. http://www.stampede.org/mailinglists.php3
  121. http://www.suse.com/en/support/mailinglists/index.html
  122. http://www.trustix.net/support/
  123. http://www.turbolinux.com/mailman/listinfo/tl-security-announce
  124. http://lists.yellowdoglinux.com/ydl_updates.shtml
  125. http://munitions.vipul.net/
  126. http://www.zedz.net/
  127. http://www.cert.org/nav/alerts.html
  128. http://ciac.llnl.gov/ciac/
  129. http://www.MountainWave.com/
  130. http://www.counterpane.com/crypto-gram.html
  131. http://linuxlock.org/
  132. http://linuxsecurity.com/
  133. http://www.opensec.net/
  134. http://www.securityfocus.com/
  135. http://www.securityportal.com/
  136. http://lwn.net/2001/0607/kernel.php3
  137. http://www.eklektix.com/
  138. http://www.eklektix.com/
 
 --- ifmail v.2.14.os7-aks1
  * Origin: Unknown (2:4615/71.10@fidonet)
 
 

Вернуться к списку тем, сортированных по: возрастание даты  уменьшение даты  тема  автор