similar to: ipop2d buffer overflow fix (fwd)

In Debian 1.1, the optional DOSEMU package installs /usr/sbin/dos setuid root. This is a serious security hole which can be exploited to gain access to any file on the system. Package: dosemu Version: 0.64.0.2-9 ------- start of cut text -------------- $ cat /etc/debian_version 1.1 $ id uid=xxxx(quinlan) gid=xxxx(quinlan) groups=xxxx(quinlan),20(dialout),24(cdrom) [quinlan:~]$ ls -al

Has anyone released or is working on a patch yet for this pop2d vulnerability, Our site has been hit twice this week before we found what was causing it. Apparently a remote user can crash pop2d out into a shell account for user nobody. description of the exploit and code can be found at. http://www.rootshell.com/archive-j457nxiqi3gq59dv/199906/sdi-pop2.c.html Thanks

Dear Sir or Madam, Has anyone seen a error message like the following? rsync: recv_generator: mkdir "/home/kmiller/briefcase/1205275" failed: Too many links (31) rsync: stat "/home/kmiller/briefcase/1205275" failed: No such file or directory (2) As far as I can tell, I am not using any symlinks or hardlinks. Please find below a reasonably complete bug report. Please let

I've setup samba on my slacware box. Here is my smb.conf: ###################################3 My SMB.CONF ###################################3 root@darkstar:/usr/local/samba/bin# cat ../lib/smb.conf [global] workgroup = home netbios name = darkstar [videos] path = /mnt/backup public = yes writable = yes ###################################3 My TESTPARM SMB.CONF

Hi, I''m running Xen 4 on Slack64. I haven''t console login prompt to domU until I changed xvc0 to hvc0 on /etc/inittab file. No I have access to login but whenever I try to login I get this error from /var/adm/secure file root@darkstar:/var/adm# cat secure Apr 28 22:49:22 darkstar login[1286]: ILLEGAL ROOT LOGIN on `hvc0'' Apr 28 22:49:45 darkstar last message repeated

I have a system that I''m trying to bring up with a mirrored rpool. I''m using DarkStar''s ZFS Root Mirror blog post as a guide (http://darkstar-solaris.blogspot.com/2008/09/zfs-root-mirror.html). When I get to step 3 I execute: pfexec prtvtoc /dev/rdsk/c7d0s2 | fmthard -s - /dev/rdsk/c7d1s2 I get: fmthard: Cannot open device /dev/rdsk/c7d1s2 - Permission denied Any

Hi everyone! I am using OpenSuse 10.3 with desktop effect compiz-fusion and wine 0.9.57! I have installed counter strike 1.6 with wine and everything went fine. When i run the game with no desktop effect works fine but when i run with desktop effects it doesn`t start and it tells me: Code: calin at DarkStar:~/.wine/drive_c/Program Files/Valve> wine hl.exe -game cstrike

This may be, or may not be a security issue, however, since alot of people still use tripwire-1.2 or lesser versions(this is what shipped with R.H. Linux 5.2 at least), they might be interested in following detail: Chuck Campbell (campbell@neosoft.com) pointed me out that tripwire dies with coredump on R.H. linux, if it hits a filename containing 128-255 characters. Playing a bit with debugger I

I am trying to get encrypted passwords working for a Linux/Samba server serving Win9x clients. We want the students to be able to logon either the Samba file system or the Linux server and allow the students to change their password from either. I would really appreciate any help on this matter. We need to get this working as quickly as possible as the old Netware server is on life support.

vorbis@xiph.org wrote: > Hello, this is the mailing list anti-spam filter at Xiph.Org. > We need you to confirm your e-mail message with the subject of > "Re: [vorbis] Re: Quoting (OT)". > > Please send a message to the following address, or simply use your > mailer's "Reply" feature. > > vorbis+confirm+1054602922.26986.932b05@xiph.org > >

Folks, I'm setting up to sync files from a staging env to a prodution env, such that the filesystems for both are served via nfs to their respective systems. Thus, I can do the rsync on the nfs server as a 'advanced cp'. rsnyc $parms filessystem filesystem2 Due to ownerships and permissions, I have to run this as root, but, I'd like the files to belong to another user and

This is smb.conf: [global] workgroup = workgroup netbios name = darkstar security = share log file = /var/log/samba.%m max log size = 50 [homes] comment = Home Directories browseable = yes read only = No [printers] comment = All Printers path = /var/spool/samba guest ok = yes printable = yes

Hi, all. I''m having a problem installing Rails on Mac OS X 10.6.8. When I issue the command `$ sudo gem install rails` I get: <code> [Tue Nov 08 23:36:17 dobbin@darkstar:~ ] $ sudo gem install rails Password: /usr/local/rvm/rubies/ruby-1.9.3-p0/bin/gem:4: warning: Insecure world writable dir /usr/local/bin in PATH, mode 040777 Successfully installed rails-3.1.1 1 gem installed

Hi all. Many KUDOS to the Samba development team! I am trying to interpret some performance testing results, and could use some hela, and any possible Samba tuning suggestions. Oplocks are turned on, BTW, which has caused the Samba performance results to come WAY up compared to with prior Samba releases. The following test results consist of the time to perform database queries using a Borland

Hi ! Kenrel 2.6.21 (kernel.org) Patch lguest-2.6.21-254.patch Distro Slackware 11.0 GCC 3.4.6 GLIBC 2.3.6 HW model name : AMD Duron(tm) procu{s{ Module Size Used by tun 7680 0 lg 54600 0 just started playing with lguest - patching, compiling and booting the host-kernel goes ok - compiling lguest is ok as well after

Hi ! Kenrel 2.6.21 (kernel.org) Patch lguest-2.6.21-254.patch Distro Slackware 11.0 GCC 3.4.6 GLIBC 2.3.6 HW model name : AMD Duron(tm) procu{s{ Module Size Used by tun 7680 0 lg 54600 0 just started playing with lguest - patching, compiling and booting the host-kernel goes ok - compiling lguest is ok as well after

Hi all, What does (T) mean on the output of "iax2 show peers"? The following my output. darkstar*CLI> iax2 show peers Name/Username Host Mask Port Status ronaldo (Unspecified) (D) 255.255.255.255 0 UNKNOWN sp/ata 201.26.67.102 (S) 255.255.255.255 4569 (T) UNKNOWN 2 iax2 peers [0

I installed a printer, HP DeskJet 6122, which has no Ethernet device inside. In Windows, I use a local port with address \\darkstar\hp6122. The printer work, but I can see it only in Windows menu "Fax and Printers", not in the share resource of Samba, even if I set my smb.conf with "load printers" and, in [printers]. "browseable = yes" Is it all ok? Thanx M. --

Hello, I am trying to install a program based on R, but I am receiving the following error message: root at darkstar:/home/maria/UCS# perl System/Install.perl Error: Can't run the R interpreter (/usr/local/bin/R). Please make sure that R is installed and specify the fully qualified filename of the R interpreter with -R if necessary (see "doc/install.txt"). I do have installed R,

Hello all, There are two issues in OpenSSH RPM Red Hat spec file (against 2.2.0p1): 1. /etc/rc.d/init.d/sshd uses 'success' and 'failure'. These don't work in Red Hat 5.2; else the spec file is fine. Initscripts requirement (for the one in RH60) added. 2. If you're upgrading over SSH ltd's ssh-server, the server will be stopped and sshd removed from chkconfig