search for: makewhatis

--------------------------------------------------------------------- Red Hat, Inc. Security Advisory Synopsis: man package''s ''makewhatis'' uses insecure handling of files in /tmp Advisory ID: RHSA-2000:041-02 Issue date: 2000-07-03 Updated on: 2000-07-03 Product: Red Hat Linux Keywords: man /tmp makewhatis Cross references: N/A ----------------------------------------------------------...

There is a serious problem with the makewhatis cronjob under Redhat Linux 4.0/3.0.3. You can use it to overwrite any file on the system. Redhat is aware of the problem, and said they would have some kind of fix by next week which should be plenty of time before this bug is exploitable again. #!/bin/sh # # blowitawaysam # # makewhatis is a sh...

I updated my x86 machine day before yesterday, and I noticed two things. The clamav user and group was deleted, and not recreated, and when the makewhatis ran, I got a page full of "zcat: stdout: Broken pipe" entries. What gives with the makewhatis and clamav? Was clamav removed from the software? I encountered no errors when the transaction check and transactions were run. Hints? -- Sam W.Drinkard -- sam at wa4phy.net NOAA Coopera...

After you do your update, done forget to do updatedb, makewhatis, ... The locate for rpmnew has a couple items of interest and the locate for rpmsave returns one that occupies 24MB of your precious disks - /var/lib/Pegasus/prev-repository*. It compresses nicely to appx. 1MB, cpio bzipped --best. Change in your rndc key too, for DNS.

Just looked at the log from the x86_64 machine and I see the same zcat: stdout: Broken pipe in the 00-makewhatis.cron job as on the x86 machine. Did I miss some thread about current updates somewhere? sam -- Sam W.Drinkard -- sam at wa4phy.net NOAA Cooperative Observer http://wa4phy.net Augusta Area Mesonet

...Red Hat, Inc. Red Hat Security Advisory Synopsis: Updated man package fixing GID security problems. Advisory ID: RHSA-2001:072-14 Issue date: 2001-05-28 Updated on: 2001-09-06 Product: Red Hat Linux Keywords: man setgid heap overflow path makewhatis root GID Cross references: Obsoletes: RHSA-2001:069 --------------------------------------------------------------------- 1. Topic: Updated man packages fixing a local GID man exploit and a potential GID man to root exploit, as well as a problem with the man paths of Red Hat Linux 5.x...

After update from CentOS 3.4 to 3.5 on 3 different boxes, I got the following message from each server ============================================ Subject: Cron <root at premiere> run-parts /etc/cron.daily > /etc/cron.daily/makewhatis.cron: > > > zcat: stdout: Broken pipe > > zcat: stdout: Broken pipe > > zcat: stdout: Broken pipe > > zcat: stdout: Broken pipe > .... ########Truncated due to size####################### ============================================ What does "zcat: stdout:...

...temp files, and it will follow symbolic links. A creative attacker can create files in a world writable directory that allows them to control what data will be written to the symbolic link. SuSE Linux 5.0: makewhatis uses /tmp, this allows attackers to overwrite files as root. They cannot control the data being written. The system crontab also calls updatedb. check_log_file() contains a SERIOUS security hole that...

I am getting an odd error on a recent i386 releng9 while trying to build a nanobsd image. It dies during installworld in cd /usr/src/etc/../share/man; /usr/obj/nanobsd.full//usr/src/make.i386/make makedb makewhatis /usr/obj/nanobsd.full//_.w/usr/share/man makewhatis /usr/obj/nanobsd.full//_.w/usr/share/openssl/man rm: /tmp/install.bqKyLzJg: Directory not empty *** [installworld] Error code 1 1 error *** [installworld] Error code 2 1 error The only thing special about the environment is that its netbooted and...

I was just wondering if there are special tricks people do that compile A LOT on centos? Do RAM disks help or something else I dont about that minimizes your compile time? I presently have and AMD x2 4800+ with 2GIG ram. Just curious if I can reduce any more time out of my compiles. Jerry

...sd.org/doc/en_US.ISO8859-1/books/handbook/makeworld.html But when I get to "21.4.9 Install the New System Binaries" This happens: root@smeagol /usr/src # make installworld mkdir -p /tmp/install.16560 for prog in [ awk cap_mkdb cat chflags chmod chown date echo egrep find grep ln make makewhatis mkdir mtree mv perl pwd_mkdb rm sed sh sysctl test true uname wc zic; do cp `which $prog` /tmp/install.16560; done usage: cp [-R [-H | -L | -P]] [-f | -i | -n] [-pv] src target cp [-R [-H | -L | -P]] [-f | -i | -n] [-pv] src1 ... srcN directory *** Error code 64 Stop in /usr/src. *** Err...

...xen-B1 anacron[25037]: Updated timestamp for job `cron.daily' to 2008-08-18 Aug 18 04:06:06 xen-B1 crond[2963]: (CRON) STARTUP (V5.0) the last line seems to be the reboot. here the content of my cron.daily folder. [root at xen-B1.blab:/etc/cron.daily]# ls 0anacron 0logwatch cups logrotate makewhatis.cron mlocate.cron prelink rpm tmpwatch I had also heartbeat running on the machines, after the last crash I thougt it was heartbeat that rebooted the machines, so I disabled it, but now I see it isnt heartbeat that causes these reboots. I use centos 5.1 with no selfcompiled packages. Why are m...

Hi All, i have a local repository configured for 'yum',which have files copied over from the RHEL DVD,It was configured initially,as i was facing some issues with my NIC which was not supported on 2.6.18 so had to upgrade to 2.6.26. Now as all is working fine and i'm on net i want to disable that repository and just use the rpmforge repository configured on my system following

After the recent attacks on the major servers on the web my ISP has decided to stop all ICMP messages from his ISP. I have red the RFCs and it seems that he cant do that... As a result pings and traceroutes will not work. I need a friendly person out there to tell me a way to break the news to him that he has to allow ICMP packets through his network... any suggestions would be helpfull [mod:

All, Is there a command line program in centos to echo back the size of an image (gif,jpg,png)? I did see that file image.jpg sometimes works but reports the wrong image size. I see xview image.jpg reports the correct size but I dont want to see the image just get its size. Thanks for any suggestions. Jerry -------------- next part -------------- An HTML attachment was scrubbed... URL:

Hi, I am sorry about this stupid question but after compilation of openssh-2.3.0p1 the manpages were installed but a man ssh gives only unstructured response without underlined lines etc. A nroff -man sshd.8 gives the same output but the contents of the file shows a nroff-format. Any ideas? My system is a HP-UX 11.000 with the pam-patch. regards Stephan -- LDS Brandenburg Dr. Stephan Hendl

Hiya, Currently running Centos 4.2 x86_64 dist on a dual 3G xeon, 2G ram, scsi setupand everythings been running fine on it for some time. Then at 4am last night something kicked in (have mrtg running monitoring when) and since then its been running a load of about 1.5 (normally around 0.4). CPU usage is Cpu(s): 1.1% us, 0.6% sy, 0.0% ni, 97.9% id, 0.2% wa, 0.1% hi, 0.1%si. Can't see

I am running CentOS 5 on a dual-dual-core Intel machine, and I am seeing a load average of between 0.35 and 0.50 while the machine is idle, i.e. no processes appear to be running. Both top and uptime report the same thing. Looking at top, I cannot see any processes that are using CPU time except for top and init, and they are not using enough cycles to push up the load average. According to

.... Here is the dir for cron.daily cron.daily $ lsl total 164 drwxr-xr-x 2 root root 4096 Jan 2 01:59 ./ drwxr-xr-x 108 root root 12288 Mar 8 06:03 ../ lrwxrwxrwx 1 root root 28 Oct 19 2008 00-logwatch -> ../log.d/scripts/logwatch.pl* -rwxr-xr-x 1 root root 418 Nov 17 2007 00-makewhatis.cron* -rwxr-xr-x 1 root root 135 Feb 21 2005 00webalizer* -rwxr-xr-x 1 root root 276 Feb 21 2005 0anacron* -rwxr-xr-x 1 root root 125 Jan 2 01:59 apcstatus* -rwxr-xr-x 1 root root 123 Jan 2 01:56 apcstatus~* -rwxr-xr-x 1 root root 1042 Jan 29 2008 certwatch* -rwxr-xr-x...

At the current time I am not subscribed to the mailing list. I have a blacklist that I got from www.peerguardian.net that is rather large ( 81 kb). When shorewall start command is issued it takes about 20 mins for it to load. Is this normal or should I do this another way? Also I noticed something very strange with shorewall .. I have cron do a shorewall restart command every 24 hours and