+---------------------------------------------------------------------+
| LinuxSecurity.com Weekly Newsletter |
| April 7th, 2006 Volume 7, Number 15n |
| |
| Editorial Team: Dave Wreski dave@private |
| Benjamin D. Thomas ben@private |
+---------------------------------------------------------------------+
Thank you for reading the LinuxSecurity.com weekly security newsletter.
The purpose of this document is to provide our readers with a quick
summary of each week's most relevant Linux security headlines.
This week advisories were released for apache, storebackup, kaffeine,
clamav, dia, sash, mailman, rpm, scim-hangul, scim, mrtg, wpa_supplicant,
samba, policycoreutils, selinux-policy, mc, k3b, open office, pcmciautils,
gnome-applets, binutils, sendmail, newt, dovecot, dia, sane-backends,
iptraf, tix, xscreensaver, liboil, alsa-utils, system-config-printer,
horde, freeradius, mysql, and openmotif. The distributors include
Debian, Fedora, Gentoo, Mandriva, and Red Hat.
---
EnGarde Secure Linux: Why not give it a try?
EnGarde Secure Linux is a Linux server distribution that is geared
toward providing a open source platform that is highly secure by default
as well as easy to administer. EnGarde Secure Linux includes a select
group of open source packages configured to provide maximum security
for tasks such as serving dynamic websites, high availability mail
transport, network intrusion detection, and more. The Community
edition of EnGarde Secure Linux is completely free and open source,
and online security and application updates are also freely
available with GDSN registration.
http://www.engardelinux.org/modules/index/register.cgi
---
Review: The TCP/IP Guide
By: Eric Lubow
To be a comprehensive source of information is something that any
and every author attempts to be in their works. While writing The
TCP/IP Guide: A Comprehensive, Illustrated Internet Protocols
Reference, Charles Kozierok nothing short of comprehensive. In this
1616 page, 88 chapter reference of the TCP/IP protocol set, all
the important topics are covered.
Normally, when I review books, I give a little bit of information
on each chapter. In this case, that would be a little drastic and
cause an extremely long review.
Whatever little I write as a summary here just will not do this
guide the justice it deserves for the effort of the author. Although
the book covers such a wide variety of topics, each one is covered
very thoroughly.
Beginning with basic networking concepts and moving into the OSI
(Open Systems Interconnection) model, the bases are fully covered.
He even goes so far in depth as to discuss the standards
organizations that contribute to, support, and govern networking
and the Internet. Once the OSI model is covered, he goes on to
talk about how TCP, UDP, and IP protocols integrate themselves
into the OSI model.
The first topic that is covered within the TCP/IP protocol suite
are the interface protocols: SLIP and PPP. Every major PPP and
SLIP sub item is covered within the chapters. These include: LCP,
PAP, CHAP, ECP, PPP MP, just to name a few.
The next set of chapters is covering ARP, RARP, IPv4, IPv6, IP
NAT and IP Sec. This basically covers how to move from level 2
to level 3 in the OSI model. Following the OSI model up, he then
covers ICMPv4 and ICMPv6 prior to proceeding into routing. The
routing protocols covered are: RIP, RIP-2, RIPng OSPF, BGP3,
BGP4, GGP, EGP, EGRP, EIGRP, and HELLO.
After thoroughly covering how data moves from place to place on
the lower levels of the OSI model, he begins by covering TCP and
UDP by session establishment and handshaking. Since the book is
about TCP protocols, there is a lot of discussion and diagrams
of message headers and the theory behind TCP and UDP being
designed the way they are.
Since all these protocols are merely transport mechanisms for
higher level applications, a great deal of time in this book is
dedicated to how those higher level applications function. Some
of these applications and systems are: DNS, NFS, BOOTP, DHCP,
SNMP, RMON, URI and URL structure, FTP, TFP, Email systems
including SMTP and MIME structures, HTTP (transfers, encoding,
messages, entities, etc), NNTP, and Gopher (again to name just
a few). All of these applications that now have counterparts
that support IPv6 are also examined and broken down. Each one
of the topics listed above have associated diagrams and message
layouts to allow as deep a comprehension as is desired by the
reader.
He finishes up the book talking about remote application protocols
and troubleshooting tools. This is especially handy information to
have at your fingertips if you are constantly troubleshooting
network or application level issues. He even goes so far as to
break down common UNIX and Windows commands into their command
lines and what the output is actually saying about the state of
the packet, interface, application, or network.
Read More:
http://www.linuxsecurity.com/content/view/122263/49/
----------------------
EnGarde Secure Community 3.0.4 Released
Guardian Digital is happy to announce the release of EnGarde
Secure Community 3.0.4 (Version 3.0, Release 4). This release
includes several bug fixes and feature enhancements to the Guardian
Digital WebTool and the SELinux policy, and several new packages
available for installation.
http://www.linuxsecurity.com/content/view/121560/65/
---
Linux File & Directory Permissions Mistakes
One common mistake Linux administrators make is having file and
directory permissions that are far too liberal and allow access
beyond that which is needed for proper system operations. A full
explanation of unix file permissions is beyond the scope of this
article, so I'll assume you are familiar with the usage of such
tools as chmod, chown, and chgrp. If you'd like a refresher, one
is available right here on linuxsecurity.com.
http://www.linuxsecurity.com/content/view/119415/49/
---
Buffer Overflow Basics
A buffer overflow occurs when a program or process tries to
store more data in a temporary data storage area than it was
intended to hold. Since buffers are created to contain a finite
amount of data, the extra information can overflow into adjacent
buffers, corrupting or overwriting the valid data held in them.
http://www.linuxsecurity.com/content/view/119087/49/
--------
--> Take advantage of the LinuxSecurity.com Quick Reference Card!
--> http://www.linuxsecurity.com/docs/QuickRefCard.pdf
+---------------------------------+
| Distribution: Debian | ----------------------------//
+---------------------------------+
* Debian: New Apache2::Request packages fix denial of service
3rd, April, 2006
Updated package.
http://www.linuxsecurity.com/content/view/122186
* Debian: New storebackup packages fix several vulnerabilities
3rd, April, 2006
Updated package.
http://www.linuxsecurity.com/content/view/122206
* Debian: New Linux kernel 2.4.27 packages fix several
vulnerabilities
5th, April, 2006
Updated package.
http://www.linuxsecurity.com/content/view/122222
* Debian: New kaffeine packages fix arbitrary code execution
5th, April, 2006
Updated package.
http://www.linuxsecurity.com/content/view/122223
* Debian: New clamav packages fix several vulnerabilities
5th, April, 2006
Updated package.
http://www.linuxsecurity.com/content/view/122237
* Debian: New dia packages fix arbitrary code execution
6th, April, 2006
Updated package.
http://www.linuxsecurity.com/content/view/122244
* Debian: New sash packages fix potential arbitrary code execution
6th, April, 2006
Updated package.
http://www.linuxsecurity.com/content/view/122245
* Debian: New mailman packages fix denial of service
6th, April, 2006
Updated package.
http://www.linuxsecurity.com/content/view/122246
+---------------------------------+
| Distribution: Fedora | ----------------------------//
+---------------------------------+
* Fedora Core 4 Update: kernel-2.6.16-1.2069_FC4
30th, March, 2006
Updated package.
http://www.linuxsecurity.com/content/view/122170
* Fedora Core 4 Update: rpm-4.4.1-23
30th, March, 2006
This update fixes an issue with a double free experienced in
verification with matchpathcon.
http://www.linuxsecurity.com/content/view/122171
* Fedora Core 5 Update: scim-hangul-0.2.2-1.fc5
30th, March, 2006
Updated package.
http://www.linuxsecurity.com/content/view/122172
* Fedora Core 5 Update: scim-anthy-1.0.0-1.fc5
30th, March, 2006
Updated package.
http://www.linuxsecurity.com/content/view/122173
* Fedora Core 5 Update: mrtg-2.13.2-0.fc5.1
30th, March, 2006
Fixes the RouterUptime option.
http://www.linuxsecurity.com/content/view/122174
* Fedora Core 5 Update: wpa_supplicant-0.4.8-6.fc5
30th, March, 2006
Updated package.
http://www.linuxsecurity.com/content/view/122175
* Fedora Core 5 Update: samba-3.0.22-1.fc5
30th, March, 2006
Updated package.
http://www.linuxsecurity.com/content/view/122176
* Fedora Core 5 Update: policycoreutils-1.30.1-3.fc5
3rd, April, 2006
Updated package.
http://www.linuxsecurity.com/content/view/122189
* Fedora Core 5 Update: selinux-policy-2.2.25-3.fc5
3rd, April, 2006
Updated package.
http://www.linuxsecurity.com/content/view/122190
* Fedora Core 5 Update: mc-4.6.1a-12.FC5
3rd, April, 2006
Updated package.
http://www.linuxsecurity.com/content/view/122191
* Fedora Core 5 Update: k3b-0.12.14-0.FC5.2
3rd, April, 2006
update to version 0.12.14
http://www.linuxsecurity.com/content/view/122192
* Fedora Core 4 Update: k3b-0.12.14-0.FC4.1
3rd, April, 2006
Updated package.
http://www.linuxsecurity.com/content/view/122193
* Fedora Core 5 Update: openoffice.org-2.0.2-5.7.2
3rd, April, 2006
Fixes for a11y and font handling.
http://www.linuxsecurity.com/content/view/122194
* Fedora Core 5 Update: pcmciautils-012-0.FC5.2
3rd, April, 2006
User with pcmcia, namely Laptop users, who experience a hangup at
"Starting udev" should update to this package.
http://www.linuxsecurity.com/content/view/122195
* Fedora Core 5 Update: gnome-applets-2.14.0-1.fc5
3rd, April, 2006
This update allows the gswitchit applet's plugins to work.
http://www.linuxsecurity.com/content/view/122196
* Fedora Core 5 Update: perl-HTML-Parser-3.51-1.FC5
3rd, April, 2006
Updated package.
http://www.linuxsecurity.com/content/view/122197
* Fedora Core 5 Update: perl-DBD-Pg-1.47-0.1.FC5
3rd, April, 2006
Updated package.
http://www.linuxsecurity.com/content/view/122198
* Fedora Core 5 Update: perl-Net-DNS-0.57-1
3rd, April, 2006
Updated package.
http://www.linuxsecurity.com/content/view/122199
* Fedora Core 5 Update: binutils-2.16.91.0.6-5
3rd, April, 2006
Updated package.
http://www.linuxsecurity.com/content/view/122200
* Fedora Core 5 Update: wpa_supplicant-0.4.8-7.fc5
3rd, April, 2006
This update works around older and 3rd-party drivers that report
wireless network names incorrectly, causing wpa_supplicant to
prematurely terminate a wireless connection.
http://www.linuxsecurity.com/content/view/122201
* Fedora Core 5 Update: gthumb-2.7.5.1-1.fc5.1
4th, April, 2006
Updated package.
http://www.linuxsecurity.com/content/view/122221
* Fedora Core 4 Update: sendmail-8.13.6-0.FC4.1
5th, April, 2006
A flaw in the handling of asynchronous signals. A remote attacker may
be able to exploit a race condition to execute arbitrary code as
root.
http://www.linuxsecurity.com/content/view/122232
* Fedora Core 5 Update: sendmail-8.13.6-0.FC5.1
5th, April, 2006
A flaw in the handling of asynchronous signals. A remote attacker may
be able to exploit a race condition to execute arbitrary code as
root.
http://www.linuxsecurity.com/content/view/122233
* Fedora Core 5 Update: newt-0.52.2-6
5th, April, 2006
Updated package.
http://www.linuxsecurity.com/content/view/122234
* Fedora Core 4 Update: dovecot-0.99.14-8.fc4
5th, April, 2006
Updated package.
http://www.linuxsecurity.com/content/view/122235
* Fedora Core 4 Update: dia-0.94-13.fc4
5th, April, 2006
Fixes CVE-2006-1550 Dia multiple buffer overflows
http://www.linuxsecurity.com/content/view/122236
* Fedora Core 5 Update: sane-backends-1.0.17-5.fc5.8
5th, April, 2006
Updated package.
http://www.linuxsecurity.com/content/view/122238
* Fedora Core 5 Update: iptraf-3.0.0-1.3.FC5
5th, April, 2006
Updated package.
http://www.linuxsecurity.com/content/view/122239
* Fedora Core 5 Update: tix-8.4.0-6
5th, April, 2006
The tix package was assembled incorrectly which ended up breaking
wish and tkinter/ipython. The libraries are now in the right place.
http://www.linuxsecurity.com/content/view/122240
* Fedora Core 5 Update: xscreensaver-4.24-2
6th, April, 2006
Don't leak zombie processes with the GL SlideShow ScreenSaver
http://www.linuxsecurity.com/content/view/122254
* Fedora Core 5 Update: GConf2-2.14.0-1
6th, April, 2006
Updated package.
http://www.linuxsecurity.com/content/view/122255
* Fedora Core 5 Update: liboil-0.3.8-1.fc5
6th, April, 2006
This update rebases liboil to 0.3.8 to help resolve issues required
by packages in Fedora Extras.
http://www.linuxsecurity.com/content/view/122256
* Fedora Core 5 Update: gnome-screensaver-2.14.0-1.fc5
6th, April, 2006
This update corrects a problem where kerberos credentials weren't
being properly refreshed when a user successfully authenticates in
the unlock dialog.
http://www.linuxsecurity.com/content/view/122257
* Fedora Core 5 Update: alsa-utils-1.0.11-4.rc2
6th, April, 2006
Updated package.
http://www.linuxsecurity.com/content/view/122258
* Fedora Core 5 Update: system-config-printer-0.6.151.2-1
6th, April, 2006
With no configured printers, it was not possible to disable automatic
browsing for shared printers.
http://www.linuxsecurity.com/content/view/122259
* Fedora Core 5 Update: gnome-screensaver-2.14.0-1.fc5.1
6th, April, 2006
This update fixes problems detecting idle activity.
http://www.linuxsecurity.com/content/view/122260
+---------------------------------+
| Distribution: Gentoo | ----------------------------//
+---------------------------------+
* Gentoo: MediaWiki Cross-site scripting vulnerability
4th, April, 2006
MediaWiki is vulnerable to a cross-site scripting attack that could
allow arbitrary JavaScript code execution.
http://www.linuxsecurity.com/content/view/122217
* Gentoo: Horde Application Framework Remote code execution
4th, April, 2006
The help viewer of the Horde Framework allows attackers to execute
arbitrary remote code.
http://www.linuxsecurity.com/content/view/122219
* Gentoo: FreeRADIUS Authentication bypass in EAP-MSCHAPv2
4th, April, 2006
The EAP-MSCHAPv2 module of FreeRADIUS is affected by a validation
issue which causes some authentication checks to be bypassed.
http://www.linuxsecurity.com/content/view/122220
* Gentoo: Kaffeine Buffer overflow
5th, April, 2006
Kaffeine is vulnerable to a buffer overflow that could lead to the
execution of arbitrary code.
http://www.linuxsecurity.com/content/view/122241
* Gentoo: Doomsday Format string vulnerability
5th, April, 2006
Format string vulnerabilities in Doomsday may lead to the execution
of arbitrary code.
http://www.linuxsecurity.com/content/view/122243
+---------------------------------+
| Distribution: Mandriva | ----------------------------//
+---------------------------------+
* Mandriva: Updated dia packages fix buffer overflow vulnerabilities
3rd, April, 2006
Three buffer overflows were discovered by infamous41md in dia's xfig
import code. This could allow for user-complicit attackers to have
an unknown impact via a crafted xfig file, possibly involving an
invalid color index, number of points, or depth. Updated packages
have been patched to correct this issue.
http://www.linuxsecurity.com/content/view/122207
* Mandriva: Updated php packages fix information disclosure
vulnerability
3rd, April, 2006
A vulnerability was discovered where the html_entity_decode()
function would return a chunk of memory with length equal to the
string supplied, which could include php code, php ini data, other
user data, etc. Note that by default, Corporate 3.0 and Mandriva
Linux LE2005 ship with magic_quotes_gpc on which seems to protect
against this vulnerability "out of the box" but users are encourages
to upgrade regardless.
http://www.linuxsecurity.com/content/view/122208
* Mandriva: Updated MySQL packages fix logging bypass vulnerability
3rd, April, 2006
MySQL allows local users to bypass logging mechanisms via SQL queries
that contain the NULL character, which are not properly handled by
the mysql_real_query function. Updated packages have been patched to
correct this issue.
http://www.linuxsecurity.com/content/view/122209
* Mandriva: Updated kaffeine packages fix remote buffer overflow
vulnerability
5th, April, 2006
Marcus Meissner discovered Kaffeine contains an unchecked buffer
while creating HTTP request headers for fetching remote RAM
playlists, which allows overflowing a heap allocated buffer. As a
result, remotely supplied RAM playlists can be used to execute
arbitrary code on the client machine.
http://www.linuxsecurity.com/content/view/122231
* Mandriva: Updated FreeRADIUS packages fix off-by-one overflow
vulnerabilty
5th, April, 2006
Off-by-one error in the sql_error function in sql_unixodbc.c in
FreeRADIUS might allow remote attackers to cause a denial of service
(crash) and possibly execute arbitrary code by causing the external
database query to fail. Updated packages have been patched to correct
this issue.
http://www.linuxsecurity.com/content/view/122242
+---------------------------------+
| Distribution: Red Hat | ----------------------------//
+---------------------------------+
* RedHat: Important: freeradius security update
4th, April, 2006
Updated freeradius packages that fix an authentication weakness are
now available. This update has been rated as having important
security impact by the Red Hat Security Response Team.
http://www.linuxsecurity.com/content/view/122210
* RedHat: Moderate: openmotif security update
4th, April, 2006
Updated openmotif packages that fix a security issue are now
available. This update has been rated as having moderate security
impact by the Red Hat Security Response Team.
http://www.linuxsecurity.com/content/view/122211
------------------------------------------------------------------------
Distributed by: Guardian Digital, Inc. LinuxSecurity.com
To unsubscribe email vuln-newsletter-request@private
with "unsubscribe" in the subject of the message.
------------------------------------------------------------------------
_________________________________
LayerOne 2006 : Pasadena Hilton : Pasadena, CA
Infomation Security and Technology Conference
http://layerone.info
This archive was generated by hypermail 2.1.3 : Thu Apr 06 2006 - 23:09:27 PDT