similar to: /bin/login

In Debian 1.1, the optional DOSEMU package installs /usr/sbin/dos setuid root. This is a serious security hole which can be exploited to gain access to any file on the system. Package: dosemu Version: 0.64.0.2-9 ------- start of cut text -------------- $ cat /etc/debian_version 1.1 $ id uid=xxxx(quinlan) gid=xxxx(quinlan) groups=xxxx(quinlan),20(dialout),24(cdrom) [quinlan:~]$ ls -al

Hi, I''ve been thinking about group membership and the corresponding (weak) restrictions to system resources. Consider the following: % cat > gsh.c main() { system("/bin/sh"); } % cc -o gsh gsh.c % id uid=100(joe) gid=500(users) groups=14(floppy),15(sound) % chgrp sound gsh % chmod g+s gsh % mail abuser Subject: You owe me $5...

Alexander O. Yuriev wrote: > > Your message dated: Wed, 20 Nov 1996 18:04:39 EST > > >has anyone played with the securelevel variable in the kernel and the > > >immutable flags in the ext2 file system? > > > > Yes, and its actualy quite nice. > > > > >The sysctrl code seems to allow the setting of the flag > > >only by init (PID=1)

> Intel: > rpm -Uvh ftp://ftp.redhat.com/updates/4.0/i386/util-linux-2.5-29.i386.rpm > > Alpha: > rpm -Uvh ftp://ftp.redhat.com/updates/4.0/axp/util-linux-2.5-29.axp.rpm > > SPARC: > rpm -Uvh ftp://ftp.redhat.com/updates/4.0/sparc/util-linux-2.5-29.sparc.rpm > > All of these packages have been signed with Red Hat''s PGP key. But when you do this,

////////////////////////////////////////////////////////////////////////// I have got a couple of messages stating that I am wrong and that the resolver vulnerability sent to list by Oliver Friedrichs (oliver@secnet.com) is a new one. Our discussion with Oliver outlined that even though it is possible that this vulnerability was discussed during BOFs at conferences such as LISA, SANS and NETSEC,

Hi, well, swift response! Qualcomm has a patched qpopper (2.5) Greetings, Jan-Philip Velders <jpv@jvelders.tn.tudelft.nl> ---------- Forwarded message ---------- Date: Mon, 29 Jun 1998 21:43:18 -0700 From: Praveen Yaramada <pyaramad@QUALCOMM.COM> To: BUGTRAQ@NETSPACE.ORG Subject: Patched Qpopper2.5 release Notification. Hello Folks, As you are already aware that qpopper

I often find with Samba v2.0.3 that files accessed via Win95 (OSR2) stay locked forever after exiting the application that used them. I've got an application called Visual SlickEdit (VSE), which is installed on a shared drive. The drive is an exported Samba share from my RedHat v5.2 (kernel v2.2.5) server. Both the Win32 and OS/2 versions of VSE are installed beneath the same subdirectory

DearR Users, I have a problem which I think you might be able to help. I have a dataframe which I'm trying to "filter" following different groups I specified. It's a little hard to explain, so here is an example: My dataframe: ESS DHP 1 EPB 22 2 SAB 10 3 SAB 20 4 BOJ 14 5 ERS 28 11 SAB 10 12 SAB 22 13 BOJ 26 20 SAB 10 21 SAB 22 22 BOJ 32 29 SAB 14 30 SAB

Marek Michalkiewicz <marekm@I17LINUXB.ISTS.PWR.WROC.PL> wrote: : It seems that most of the RedHat 5.3.12 security patches are in the : standard 5.4.17, except for the patch below. Also, there are more : (different) fixes in 5.4.18 (check h_length against sizeof(sin_addr) : in inet/rcmd.c and inet/rexec.c). : + { : +

Hi Are there any known security holes or necessary precautions in using port forwarding with ipportfw? I'm planning on forwarding ports from an outer firewall/router (connected to the Internet) to a host in the DMZ, then on from the DMZ host to the inner firewall, and finally from the inner firewall to some host on the inside. Thanks, Jens jph@strengur.is From mail@mail.redhat.com Wed

On 11/02/2014 05:56 PM, "Thomas B. R?cker" wrote: > Hi everyone, > > Prompted by the fact that addressing some of the recent SSL problems > actually would benefit from also changing things on how openSSL is used > (not just updating the library), I started looking into some improvements. > > The tracking ticket is: > https://trac.xiph.org/ticket/2070 > > To

that seems to fix this kevent() problem, but I got the following lucene assert. Is that because of previous fails? Also, while I have your attention, is fts_autoindex supposed to work accross NAMESPACES? doveadm(mrm): Debug: Mailbox LISTS/vse-l: Opened mail UID=39483 because: fts indexing doveadm(mrm): Debug: Mailbox LISTS/vse-l: Opened mail UID=39484 because: fts indexing doveadm(mrm): Debug:

we're testing a new NFS product for our mainframe system (Conectivitiy Systems TCP/IP for VSE) and have successfully mapped a virtual drive to our unix system (AIX 4.2). We use Samba (v.1.9.18p2) to share files with the Windows 95 and Windows NT systems in the building. We have attempted to map the "mapped" drive from the mainframe via Samba. We're able to see files in the

>>> What uEFI specification version does your system claim to be compliant with?? I'd like to read over the spec for the call to verify things. -- -Gene <<< I've tried to find the relationship between UseDefaultAddress and DHP relays but I couldn't find anything. The use of DHCP relays should be really transparent... Best, Patrick

Hi list!, this is my first mail, nice to meet you ;-) The first, sorry for my english, this is not good, i am from Spain :-( The second THANKS in advance ;-) I am writing because I have a problem with the virtualization of M$ Windows on Xen. All system works OK when I virtulize systems based on GNU/Linux. When I start my Windows Machine for make installation with the CD (iso). The Windows

Hi folks, I tried to use WinSCP (http://winscp.vse.cz/eng/) for a ftp like scp-GUI for Windows in order to connect to a HP-UX machine running 11.0 and openssh-2.5.1p2. The problem is that I can connect to any user I want _except_ root! When I connect to root, then the command "echo $status" (this is the way how WinSCP detects the user shell) results in a "logout root". The

On Wed, May 10, 2017 at 4:45 AM, elio manes <elioarmando at optonline.net> wrote: > Hello, > > > I am hoping that perhaps you know the answer to my car audio question, or > can at least point me in the right direction. I own a 2013 Audi S4 that > has the 3G-Plus Multi Media Interface (MMI) with the Bang & Olufsen Sound > System. > > > The MMI is able to

Hi, There have been a bunch of useful submissions for the compare /contrast thread. To reduce the load on your mailbox, they are gathered here in one go... Roger. Date: Wed, 28 Oct 1998 15:11:37 +0000 From: "David L. Sifry" <dsifry@linuxcare.com> To: "Matthew S. Crocker" <matthew@crocker.com> CC: Rob Bringman <rob@trion.com>,

*This message was transferred with a trial version of CommuniGate(r) Pro* Greetings, aLL. There's samba-3.0.23d, running on FreeBSD-5.3 as Win2000 AD domain member. For logging user activity on share VFS module full_audit is used (with help of syslog). Logging works well, but some errors appears in log, especially when changing ACLs on share file objects from win-clients: === Nov 30

Hi Has anyone used R to conduct confirmatory factor analysis? This email pertains to use of SEM. For context consider an example: the basic idea is that there are a bunch of observables variables (say study habbits, amount of time reading in the bus, doing homework, helping other do homework, doing follow-up on errors etc.) and one believes that all these variables maybe measured by two or