Get the LinuxSecurity news you want faster with RSS
Powered By
Linux Advisory Watch: August 26th 2005
Source: LinuxSecurity.com Contributors - Posted by Benjamin D. Thomas
This week, advisories were releaed for bluez-utils, thunderbird, mysql, epiphany,
system-config-netboot, kdbg, doxygen, kdeedu, ncpfs, gaim, system-config-bind,
tar, vnc, metacity, cups, pygtk, slocate, myodbc, xpdf, libgal2, dhcpv, diskdumputils,
kdebase, cvs, hwdata, eject, pcre, kismet, wikiwiki, apache, tor, netpbm, vim,
and elm. The distributors include Debian, Fedora, Gentoo, and Red Hat.
Master of Science in Information
Security - Earn your Master of Science in Information Security online
from Norwich University. Designated a "Center of Excellence", the program offers
a solid education in the management of information assurance, and the unique case
study method melds theory into practice. Using today's e-Learning technology,
you can earn this esteemed degree, without disrupting your career or home life.
Introduction: IP Spoofing By: Suhas A Desai
An article on "Security Problems in the TCP/IP Protocol Suite" by S.M.Bellovin
in 1989 initially explored IP Spoofing attacks . He described how Robert Morris,
creator of the now infamous Internet Worm, figured out how TCP created sequence
numbers and forged a TCP packet sequence.
This TCP packet included the destination address of his victim and
using as IP spoofing attack Morris was able to obtain root access
to his targeted system without a User ID or password.
Introduction:
IP spoofing is a technique used to gain unauthorized access to
computers, whereby the attacker sends messages to a computer with
a forging IP address indicating that the message is coming from a
trusted host. There are a few variations on the types of attacks
that using IP spoofing.
1.non-blind spoofing
This attack takes place when the attacker is on the same subnet
as the target that could see sequence and acknowledgement of
packets. The threat of this type of spoofing is session hijacking
and an attacker could bypass any authentication measures taken
place to build the connection. This is accomplished by corrupting
the DataStream of an established connection, then re-establishing
it based on correct sequence and acknowledgement numbers with the
attack machine.
2.Blind spoofing
This attack may take place from outside where sequence and
acknowledgement numbers are unreachable. Attackers usually send
several packets to the target machine in order to sample sequence
numbers, which is doable in older days. Today, most OSs implement
random sequence number generation, making it difficult to predict
them accurately. If, however, the sequence number was compromised,
data could be sent to the target.
Linux File
& Directory Permissions Mistakes - One common mistake Linux administrators
make is having file and directory permissions that are far too liberal and
allow access beyond that which is needed for proper system operations. A full
explanation of unix file permissions is beyond the scope of this article,
so I'll assume you are familiar with the usage of such tools as chmod, chown,
and chgrp. If you'd like a refresher, one is available right here on linuxsecurity.com.
Introduction:
Buffer Overflow Vulnerabilities - Buffer overflows are a leading type
of security vulnerability. This paper explains what a buffer overflow is,
how it can be exploited, and what countermeasures can be taken to prevent
the use of buffer overflow vulnerabilities.
Getting
to Know Linux Security: File Permissions - Welcome to the first
tutorial in the 'Getting to Know Linux Security' series. The topic explored
is Linux file permissions. It offers an easy to follow explanation of how
to read permissions, and how to set them using chmod. This guide is intended
for users new to Linux security, therefore very simple. If the feedback is
good, I'll consider creating more complex guides for advanced users. Please
let us know what you think and how these can be improved.
Take advantage of our Linux Security discussion
list! This mailing list is for general security-related questions and comments.
To subscribe send an e-mail to security-discuss-request@linuxsecurity.com
with "subscribe" as the subject.
Thank you for reading the LinuxSecurity.com
weekly security newsletter. The purpose of this document is to provide our readers
with a quick summary of each week's most relevant Linux security headline.
Debian
Debian: New bluez-utils packages fix
arbitrary command execution
Ben Burton notified the KDE security team about several tempfile
handling related vulnerabilities in langen2kvtml, a conversion script
for kvoctrain. The script must be manually invoked.
http://www.linuxsecurity.com/content/view/120137
A carefully prepared directory structure could stop the updatedb
file system scan, resulting in an incomplete slocate database. The Common
Vulnerabilities and Exposures project has assigned the name CAN-2005-2499
to this issue.
http://www.linuxsecurity.com/content/view/120166
Fedora Core 3 Update: slocate-2.7-12.fc3.1
22nd, August, 2005
A carefully prepared directory structure could stop the updatedb
file system scan, resulting in an incomplete slocate database. The Common
Vulnerabilities and Exposures project has assigned the name CAN-2005-2499
to this issue.
http://www.linuxsecurity.com/content/view/120167
It probably is not a good idea to push a CVS snapshot here,
but upstream screwed up their 1.4.5 release and CVS contains further fixes
like PHP5 related stuff that might make squirrelmail usable on FC4. This
snapshot worked on my personal server for the past week, so hopefully
it will be good for everyone else too.
http://www.linuxsecurity.com/content/view/120174
Fedora Core 4 Update:
22nd, August, 2005
It probably is not a good idea to push a CVS snapshot here,
but upstream screwed up their 1.4.5 release and CVS contains further fixes
like PHP5 related stuff that might make squirrelmail usable on FC4.
http://www.linuxsecurity.com/content/view/120175
Updated netpbm packages that fix a security issue are now available.
This update has been rated as having low security impact by the Red Hat
Security Response Team.
http://www.linuxsecurity.com/content/view/120163
RedHat: Low: vim security update
22nd, August, 2005
Updated vim packages that fix a security issue are now available.
This update has been rated as having low security impact by the Red Hat
Security Response Team.
http://www.linuxsecurity.com/content/view/120164
RedHat: Low: slocate security update
22nd, August, 2005
An updated slocate package that fixes a denial of service issue
is now available. This update has been rated as having low security impact
by the Red Hat Security Response Team.
http://www.linuxsecurity.com/content/view/120165
RedHat: Critical: elm security update
23rd, August, 2005
An updated elm package is now available that fixes a buffer
overflow issue for Red Hat Enterprise Linux 2.1 AS and AW. This update
has been rated as having critical security impact by the Red Hat Security
Response Team.
http://www.linuxsecurity.com/content/view/120194
Only registered users can write comments. Please login or register.
