search for: jpv

...772 invoked by uid 501); 5 Aug 1998 08:36:27 -0000 Received: (qmail 16219 invoked from network); 5 Aug 1998 08:30:07 -0000 Received: from dlft2-p84.worldonline.nl (HELO jvelders.tn.tudelft.nl) (root@195.241.158.84) by mail2.redhat.com with SMTP; 5 Aug 1998 08:30:07 -0000 Received: from localhost (jpv@localhost [127.0.0.1]) by jvelders.tn.tudelft.nl (8.8.7/8.8.3) with SMTP id KAA00974; Wed, 5 Aug 1998 10:30:04 +0200 Date: Wed, 5 Aug 1998 10:30:03 +0200 (CEST) From: Jan-Philip Velders <jpv@jvelders.tn.tudelft.nl> X-Sender: jpv@jp-gp.vsi.nl To: linux-security@redhat.com cc: jpv@aacc.nl Subje...

I would be surprised if someone hasn''t encountered this already, but I haven''t found any discussion of the nature of this problem. I run RehHat 5.0. If a user makes a mistake in the login process such as the following: login: mistake password: xxx Login incorrect! login: username password xxxx bash$ a ps will show, among other things, 2333 /bin/login --mistake. Since

...to combine all the rules into _one_ file "hosts.access" (I think!), and hosts.{allow,deny} don;t function. But it doesn''t look like it''s compiled that way (-DPROCESS_OPTIONS)... Can somebody shine a light on this ? Thanks in advance! Greetings, Jan-Philip Velders <jpv@aacc.nl <jpv@jvelders.tn.tudelft.nl> -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- | Nederlandse Linux GebruikersGroep : http://www.nllgg.nl | -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-

On Fri, 26 Mar 1999, Thomas Biege wrote: > Date: Fri, 26 Mar 1999 09:34:10 +0100 (MET) > From: Thomas Biege <thomas@suse.de> > To: Jan-Philip Velders <jpv@jvelders.tn.tudelft.nl> > Cc: linux-security@redhat.com > Subject: Re: [Security - intern] [linux-security] *ALERT*: ADM Worm. Worm for Linux x86 found in wild. > The worm just exploits old security holes, so if you keep update with your > daemons you haven't fear about that...

...#39;:''))) { /* Find the colon separator */ r->status = HTTP_BAD_REQUEST; /* or abort the bad request */ return; I think this is worth patching ;-) No reports so far about people using the is the "wild"... Greetings, Jan-Philip Velders <jpv@jvelders.tn.tudelft.nl> -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- | Nederlandse Linux GebruikersGroep : http://www.nllgg.nl | -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-

...ments pointing out a glaring omission (grovel | grovel) the SOURCE CODE for StackGuard is now on line, both as a complete | tar ball and as a source patch to gcc 2.7.2.3, available here: | | http://www.cse.ogi.edu/DISC/projects/immunix/StackGuard/compiler.html Greetings, Jan-Philip Velders <jpv@jvelders.tn.tudelft.nl> _---------- Forwarded message ---------- _Date: Thu, 27 Aug 1998 22:26:54 -0700 _From: Crispin Cowan <crispin@CSE.OGI.EDU> _To: BUGTRAQ@NETSPACE.ORG _Subject: StackGuard-protected Linux and a New StackGuard Compiler StackGuard is a compiler to protect programs aga...

I was directed to the following site by one of our customers regarding a keyserver built into openssh. There's a patch for 3.4p1 on their site, but the license isn't very clear, nor is it clear if they have approached the openssh team regarding the inclusion of this subsystem into openssh proper. I've been asked to patch Mandrake's openssh with this feature, but I'm

Hi everyone, not exactly security, but might give the wrong impression about the state of your security... Greetings, Jan-Philip Velders <jpv@jvelders.tn.tudelft.nl> -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- | Nederlandse Linux GebruikersGroep : http://www.nllgg.nl | -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- _---------- Forwarded message ---------- _Date: Thu, 06 Aug 1998 13:06:59 +0200 (CDT) _From...

Hi, well, swift response! Qualcomm has a patched qpopper (2.5) Greetings, Jan-Philip Velders <jpv@jvelders.tn.tudelft.nl> ---------- Forwarded message ---------- Date: Mon, 29 Jun 1998 21:43:18 -0700 From: Praveen Yaramada <pyaramad@QUALCOMM.COM> To: BUGTRAQ@NETSPACE.ORG Subject: Patched Qpopper2.5 release Notification. Hello Folks, As you are already aware that qpopper 2.41...

...^LZ@AaSm0-v2(9!0nKJZ zo;y-y*447L8l6i#4}-%J-6td}g*4z=Nn|n3GB&TiEBNYpo)9ebw&|Aa5b`xNuOZ}Q z6S6pA?|*-wzVbFtiFZv9lvC%QTb>mh)%x2I`Kw|GOtH((BOoGEbR*#d?<?H<xbg7O zZX#d)(9+dI-kh1Vn_b3pfEw*K>iN_5kz=QVYV0F-6PP;~CBhB>^bIX`%~Lz>X>kRq zJTX;5+e0-hml3;XaBF}jYH-I8l%gg?HuXi~^0VAVI7Nk+yk^jpV$)1oOGO+U2Nnx1 za}ft~j$NgBf2f_S_w|yH^1vKQ@h%!1L{A(<o^)^izEPoq9?W78#^4s-@{WeHodY61 zf2Lkn(q~O;F1A0%$AU;2Jk;~Q<wZ)fYU&?S2A1tdbX&f$?6t7%X@7m7G?@%V`P{5y zj2zkM{4Ia_>;?C6o5|(%d0J3kA4vVYVr+#FZ{8q=csuI$w*$;R4@HX~yT9spq2Ls^ z(^Ob@cpZNd)>yk5_zvDtwzQ?wV5>Z$p;dGjczMuV)scqFcK+VkWu;obgO~pL...

Hi, some more info on the previous admw0rm alert. Fwd'd from BugTraq Greetings, Jan-Philip Velders ---------- Forwarded message ---------- Date: Fri, 26 Mar 1999 21:17:40 +0100 From: Mixter <mixter@HOME.POPMAIL.COM> To: BUGTRAQ@NETSPACE.ORG Subject: Re: ADM Worm. Worm for Linux x86 found in wild. The "ADM w0rm" is public and can be found at:

Hi *, fwd from bugtraq Greetings, Jan-Philip Velders <gvelders@jvelders.tn.tudelft.nl> -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- | Nederlandse Linux GebruikersGroep : http://www.nllgg.nl | -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- ---------- Forwarded message ---------- Date: Tue, 28 Jul 1998 20:27:21 +0200 From: Paul Boehm <paul@BOEHM.ORG> To:

-=> To moderator: I don't know whether it's wise to release the FTP-location I would recommend everyone to just look over their daemons, and run something like nessus against theirselves... Greetings, Jan-Philip Velders ---------- Forwarded message ---------- Date: Thu, 25 Mar 1999 16:26:59 -0700 From: "Ben Cantrick (Macky Stingray)" <mackys@MACKY.RONIN.NET> To: