Re: FTP-SSL

2002-12-20 Thread Tim van Erven
On Thu, 19/12/2002 11:12 +0100, Daniel Lysfjord wrote: Depends: ..., libssl0.9.6, ... From man lftp(1) : lftp can handle six file access methods - ftp, ftps, http, https, hftp, fish and file (https and ftps are only avail­ able when lftp is compiled with openssl

Re: /usr/lib/libkssl.so.2.0.2

2002-12-20 Thread Juha Jykk
Are these machines all the same architechture and running the same release? Naturally, yes. All run debian/woody and I even scp'ed the .deb around and installed the package with dpkg by hand - still I get different md5sums! 4b68a1146dfd0e326c4396e339abc750 /usr/lib/libkssl.so.2.0.2 It's 3-1

Re: CUPS vulnerabilities (remote root compromise)

2002-12-20 Thread Matt Zimmerman
On Fri, Dec 20, 2002 at 12:17:18AM -0600, David Ehle wrote: Hello all, Is the Debian package of cups Vulnerable to the security issues detailed here?: http://www.idefense.com/advisory/12.19.02.txt It doesn't mentions version 1.1.15-4 explicitly, but the vulnerablites havn't

Re: /usr/lib/libkssl.so.2.0.2

2002-12-20 Thread Wade Richards
Hi Fredrik, Try man -k to search for commands related to some keyword. $ man -k md5 debsums (1) - check the MD5 sums of installed Debian packages debsums_gen (8) - Generate /var/lib/dpkg/info/*.md5sums for packages lacking it dh_md5sums (1) - generate DEBIAN/md5sums file

CUPS vulnerabilities (remote root compromise)

2002-12-20 Thread David Ehle
Hello all, Is the Debian package of cups Vulnerable to the security issues detailed here?: http://www.idefense.com/advisory/12.19.02.txt It doesn't mentions version 1.1.15-4 explicitly, but the vulnerablites havn't been tested on many different Distros yet. If the Debian package is

Re: FTP-SSL

2002-12-20 Thread Tim van Erven
On Thu, 19/12/2002 11:12 +0100, Daniel Lysfjord wrote: Depends: ..., libssl0.9.6, ... From man lftp(1) : lftp can handle six file access methods - ftp, ftps, http, https, hftp, fish and file (https and ftps are only avail­ able when lftp is compiled with openssl

/usr/lib/libkssl.so.2.0.2

2002-12-20 Thread Juha Jäykkä
I am wondering... what would be the correct md5sum of the above file? In three machines I get twice the value 4b68a1146dfd0e326c4396e339abc750 and once the value cd59e38dfd54eca39a99094fd85a1af0. This seems quite suspicious to me, especially since I JUST INSTALLED the kdelibs3-packages to all

Re: /usr/lib/libkssl.so.2.0.2

2002-12-20 Thread Phillip Hofmeister
On Fri, 20 Dec 2002 at 06:30:49PM +0200, Juha J?ykk? wrote: I am wondering... what would be the correct md5sum of the above file? In three machines I get twice the value 4b68a1146dfd0e326c4396e339abc750 and once the value cd59e38dfd54eca39a99094fd85a1af0. This seems quite suspicious to me,

Re: /usr/lib/libkssl.so.2.0.2

2002-12-20 Thread Juha Jäykkä
Are these machines all the same architechture and running the same release? Naturally, yes. All run debian/woody and I even scp'ed the .deb around and installed the package with dpkg by hand - still I get different md5sums! 4b68a1146dfd0e326c4396e339abc750 /usr/lib/libkssl.so.2.0.2 It's 3-1

Re: /usr/lib/libkssl.so.2.0.2

2002-12-20 Thread Kuba Jakubik
Juha Jäykkä wrote: I am wondering... what would be the correct md5sum of the above file? In three machines I get twice the value 4b68a1146dfd0e326c4396e339abc750 and once the value cd59e38dfd54eca39a99094fd85a1af0. This seems quite suspicious to me, especially since I JUST INSTALLED the

Re: /usr/lib/libkssl.so.2.0.2

2002-12-20 Thread Fredrik Mollerstrand
By the way, how do I go about calculating md5 sums? Regards, Fredrik At 18:10 2002-12-20, Phillip Hofmeister wrote: On Fri, 20 Dec 2002 at 06:30:49PM +0200, Juha J?ykk? wrote: I am wondering... what would be the correct md5sum of the above file? In three machines I get twice the value

Re: /usr/lib/libkssl.so.2.0.2

2002-12-20 Thread Kuba Jakubik
Fredrik Mollerstrand wrote: By the way, how do I go about calculating md5 sums? you mean HOWTO? md5sum file BIGHard -- -BEGIN GEEK CODE BLOCK- Version: 3.12 GIT d--- s: a--- C UL P+ L+++ E--- W+ N o-- K++ w--- O M- V- PS++ PE Y PGP t 5 X R tv-- b+ DI+ D+ G++ e- h! r+ y+ --END

Re: /usr/lib/libkssl.so.2.0.2

2002-12-20 Thread Fredrik Mollerstrand
At 18:40 2002-12-20, Kuba Jakubik wrote: Fredrik Mollerstrand wrote: By the way, how do I go about calculating md5 sums? you mean HOWTO? md5sum file BIGHard right, thanks.

Re: /usr/lib/libkssl.so.2.0.2

2002-12-20 Thread Phillip Hofmeister
On Fri, 20 Dec 2002 at 06:25:54PM +0100, Fredrik Mollerstrand wrote: By the way, how do I go about calculating md5 sums? apt-get install md5sum md5sum filename or md5sum enter your data on standard inputCtrl-D -- Phil PGP/GPG Key: http://www.zionlth.org/~plhofmei/ wget -O -

Re: FTP-SSL

2002-12-20 Thread Nick Boyce
On Wed, 18 Dec 2002 10:53:45 +0100, [EMAIL PROTECTED] wrote: and I need some ftp-ssl client for windows 2000, is there anyone free ? I use FileZilla (http://filezilla.sourceforge.net), which is free and GPL'd, and lean and fast, and has a fairly nice interface. It does FTP, SFTP over SSH2, and

Re: CUPS vulnerabilities (remote root compromise)

2002-12-20 Thread Matt Zimmerman
On Fri, Dec 20, 2002 at 12:17:18AM -0600, David Ehle wrote: Hello all, Is the Debian package of cups Vulnerable to the security issues detailed here?: http://www.idefense.com/advisory/12.19.02.txt It doesn't mentions version 1.1.15-4 explicitly, but the vulnerablites havn't

Re: Need an advise about isolating a host in the DMZ

2002-12-20 Thread Nick Boyce
On Wed, 18 Dec 2002 14:19:52 +0200 (IST), [EMAIL PROTECTED] wrote: I'm thinking about using qmail as the smtp(only have access from the mail relay server)/pop3 server (from what I've read this is a very secure software). any suggestions about what ftp server should I run (is proftpd secure