Re: apache - not upgrading correctly ...

2004-04-17 Thread J.H.M. Dassen (Ray)
On Sat, Apr 17, 2004 at 05:24:07 +0200, m wrote: # lsof | grep DEL apache-ss 28184root memDEL0,4 229382 /SYSV ... It is normal ? Yes. Apache uses the System V interprocess communication mechanisms (ipc(5)). This kind of entry is associated with that.

Virus in: Re: Your archive

2004-04-17 Thread check
Warnung! Wir haben eine E-Mail mit Ihrem Absender abgefangen, die einen Virus enthält. Diese E-Mail muss nicht unbedingt von Ihrem Computer aus versandt worden sein, da Computer-Viren und Würmer oft die Adresse des Absenders fälschen. Möglicherweise erreicht diese Warnung daher nicht den

Re: suid

2004-04-17 Thread Mario Ohnewald
On Saturday 17 April 2004 01:33, Bernd Eckenfels wrote: In article [EMAIL PROTECTED] you wrote: -rwsr-xr-x1 root root22460 Oct 1 2001 /usr/bin/crontab yes, because only in this condition normal user can set crontab rules. this deends on the cron used. The cron in qustion

Re: [SECURITY] [DSA 479-1] New Linux 2.4.18 packages fix local root exploit (source+alpha+i386+powerpc)

2004-04-17 Thread Michael Stone
On Wed, Apr 14, 2004 at 05:08:42PM -0400, Phillip Hofmeister wrote: If you checked the reference CVE numbers you should be able to tell when the exposure first occurred (or close to it). No, the number has absolutely no relation to the date the vulnerability was discovered. Mike Stone -- To

Re: BF kernels (was: [DSA 479-2] New Linux 2.4.18 packages fix local root exploit (i386))

2004-04-17 Thread Michael Stone
On Thu, Apr 15, 2004 at 08:19:24PM +1000, Joshua Goodall wrote: In other words, people are ready to pounce, and that short gap of time after server installation and before installing patched code cannot be considered safe. Quite the opposite. Note that if you're doing a network install you can

Re: [SECURITY] [DSA 479-2] New Linux 2.4.18 packages fix local root exploit (i386)

2004-04-17 Thread Michael Stone
On Thu, Apr 15, 2004 at 03:30:58PM +0700, Jean Christophe ANDRÉ wrote: When you have time, could you please tell people how could that happen? It's a mistake, it happens. Mike Stone -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]

Re: [SECURITY] [DSA 479-2] New Linux 2.4.18 packages fix local root exploit (i386)

2004-04-17 Thread Jean Christophe ANDRÉ
Le samedi 17 avril 2004 10h01 (-0400), Michael Stone crivait : When you have time, could you please tell people how could that happen? It's a mistake, it happens. Off course! And I don't ask to blame anybody! I'm just curious to know the details, so it may be usefull to me too when I'm

Re: suid

2004-04-17 Thread Kuba Jakubik
IMHO, this would be bad. The Cron Daemon would have to sanitize the input of the crontab each time it checks the file for running (presumably every minute, unless their is a way of notifying the cron daemon of a new crontab.) The default crontab in debian creates a file in /tmp, the user modifies

Re: apache - not upgrading correctly ...

2004-04-17 Thread Marcin
Hello, On Sat, Apr 17, 2004 at 05:24:07 +0200, m wrote: # lsof | grep DEL apache-ss 28184root memDEL0,4 229382 /SYSV ... It is normal ? Yes. Apache uses the System V interprocess communication mechanisms (ipc(5)). This kind of entry is associated

Abwesenheitsnotiz: read it immediately

2004-04-17 Thread Lorenz, Eveline
Ihre Nachricht wurde automatisch an meine Nachfolgerin Fr.Hoch (DW1289) weitergeleitet. Mit freundlichem Gruß Eveline Lorenz

CAN-2003-0020?

2004-04-17 Thread Jan Lhr
Greetings, what about http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2003-0020 ? Is debian finally going to fix it? keep smiling yanosz -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]

Re: [SECURITY] [DSA 479-2] New Linux 2.4.18 packages fix local root exploit (i386)

2004-04-17 Thread Michael Stone
The big problem is that the kernel situation in woody blows. There are too many kernels and they don't build consistently. Hopefully things will be better in sarge (although if you look at the number of kernels out there the future seems grim) but woody will always have slow painful kernel

Re: Breaking News 7973

2004-04-17 Thread Top Medication Online Store
Page is loading... Image not loading? See message here.Discon IKM5q0i90L10ZIEjJ1Wl3Ag0GZv5Z11CROF1ayiuk.zFZR/0 pcfwh fxhcx, mxipi, van . opltei ouxs vapc, yfxq, uagerc . gxvwio qwomv nqjeuk, zhure, zkndp . cmq bsczj wqd, bhi, livhbb . clt dpi hvsa, tjqpbt, edmrqw . axr zdb irsz, nsaml, eboags

e-jubilaciones.com

2004-04-17 Thread Estudio Jurídico Previsional
Jubilaciones y Pensiones Autónomos y Monotributistas Plan de Facilidades de Pagos Ley N° 25.865 Estudio Jurídico Previsional 8 www.e-jubilaciones.com.ar ( [EMAIL PROTECTED] Si desea ser

RFS: NewPKI

2004-04-17 Thread Thomas Dupouy
Hi debian mentors. I am looking for a sponsor for two packages : newpki-server : PKI based on the OpenSSL low-level API (server package) newpki-client : PKI based on the OpenSSL low-level API (client package) Here is the story : as a journalist for a french magazine, I was asked

apache - not upgrading correctly ...

2004-04-17 Thread m
Hello, apache 1.3.26 after last upgrades I have lots of: # lsof | grep DEL apache-ss 28184root memDEL0,4 229382 /SYSV ... It is normal ? I dont think so... but how to solve this problem ? I am not exactly understand what is going on with DEL flag. Could

Re: apache - not upgrading correctly ...

2004-04-17 Thread J.H.M. Dassen (Ray)
On Sat, Apr 17, 2004 at 05:24:07 +0200, m wrote: # lsof | grep DEL apache-ss 28184root memDEL0,4 229382 /SYSV ... It is normal ? Yes. Apache uses the System V interprocess communication mechanisms (ipc(5)). This kind of entry is associated with that.

Virus in: Re: Your archive

2004-04-17 Thread check
Warnung! Wir haben eine E-Mail mit Ihrem Absender abgefangen, die einen Virus enthält. Diese E-Mail muss nicht unbedingt von Ihrem Computer aus versandt worden sein, da Computer-Viren und Würmer oft die Adresse des Absenders fälschen. Möglicherweise erreicht diese Warnung daher nicht den

Re: suid

2004-04-17 Thread Mario Ohnewald
On Saturday 17 April 2004 01:33, Bernd Eckenfels wrote: In article [EMAIL PROTECTED] you wrote: -rwsr-xr-x1 root root22460 Oct 1 2001 /usr/bin/crontab yes, because only in this condition normal user can set crontab rules. this deends on the cron used. The cron in qustion

Re: [SECURITY] [DSA 479-1] New Linux 2.4.18 packages fix local root exploit (source+alpha+i386+powerpc)

2004-04-17 Thread Michael Stone
On Wed, Apr 14, 2004 at 05:08:42PM -0400, Phillip Hofmeister wrote: If you checked the reference CVE numbers you should be able to tell when the exposure first occurred (or close to it). No, the number has absolutely no relation to the date the vulnerability was discovered. Mike Stone

Re: BF kernels (was: [DSA 479-2] New Linux 2.4.18 packages fix local root exploit (i386))

2004-04-17 Thread Michael Stone
On Thu, Apr 15, 2004 at 08:19:24PM +1000, Joshua Goodall wrote: In other words, people are ready to pounce, and that short gap of time after server installation and before installing patched code cannot be considered safe. Quite the opposite. Note that if you're doing a network install you

Re: [SECURITY] [DSA 479-2] New Linux 2.4.18 packages fix local root exploit (i386)

2004-04-17 Thread Michael Stone
On Thu, Apr 15, 2004 at 03:30:58PM +0700, Jean Christophe ANDRÉ wrote: When you have time, could you please tell people how could that happen? It's a mistake, it happens. Mike Stone

Re: [SECURITY] [DSA 479-2] New Linux 2.4.18 packages fix local root exploit (i386)

2004-04-17 Thread Jean Christophe ANDRÉ
Le samedi 17 avril 2004 à 10h01 (-0400), Michael Stone écrivait : When you have time, could you please tell people how could that happen? It's a mistake, it happens. Off course! And I don't ask to blame anybody! I'm just curious to know the details, so it may be usefull to me too when I'm

Re: suid

2004-04-17 Thread Phillip Hofmeister
On Sat, 17 Apr 2004 at 08:28:03AM -0400, Mario Ohnewald wrote: On Saturday 17 April 2004 01:33, Bernd Eckenfels wrote: In article [EMAIL PROTECTED] you wrote: -rwsr-xr-x1 root root22460 Oct 1 2001 /usr/bin/crontab yes, because only in this condition normal user can

Re: suid

2004-04-17 Thread Kuba Jakubik
IMHO, this would be bad. The Cron Daemon would have to sanitize the input of the crontab each time it checks the file for running (presumably every minute, unless their is a way of notifying the cron daemon of a new crontab.) The default crontab in debian creates a file in /tmp, the user

Re: apache - not upgrading correctly ...

2004-04-17 Thread Marcin
Hello, On Sat, Apr 17, 2004 at 05:24:07 +0200, m wrote: # lsof | grep DEL apache-ss 28184root memDEL0,4 229382 /SYSV ... It is normal ? Yes. Apache uses the System V interprocess communication mechanisms (ipc(5)). This kind of entry is associated

Abwesenheitsnotiz: read it immediately

2004-04-17 Thread Lorenz, Eveline
Ihre Nachricht wurde automatisch an meine Nachfolgerin Fr.Hoch (DW1289) weitergeleitet. Mit freundlichem Gruß Eveline Lorenz

RFS: NewPKI

2004-04-17 Thread Thomas Dupouy
Hi debian mentors. I am looking for a sponsor for two packages : newpki-server : PKI based on the OpenSSL low-level API (server package) newpki-client : PKI based on the OpenSSL low-level API (client package) Here is the story : as a journalist for a french magazine, I was asked

CAN-2003-0020?

2004-04-17 Thread Jan Lühr
Greetings, what about http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2003-0020 ? Is debian finally going to fix it? keep smiling yanosz

Re: [SECURITY] [DSA 479-2] New Linux 2.4.18 packages fix local root exploit (i386)

2004-04-17 Thread Michael Stone
The big problem is that the kernel situation in woody blows. There are too many kernels and they don't build consistently. Hopefully things will be better in sarge (although if you look at the number of kernels out there the future seems grim) but woody will always have slow painful kernel

Re: Breaking News 7973

2004-04-17 Thread Top Medication Online Store
Page is loading... Image not loading? See message here.Discon IKM5q0i90L10ZIEjJ1Wl3Ag0GZv5Z11CROF1ayiuk.zFZR/0 pcfwh fxhcx, mxipi, van . opltei ouxs vapc, yfxq, uagerc . gxvwio qwomv nqjeuk, zhure, zkndp . cmq bsczj wqd, bhi, livhbb . clt dpi hvsa, tjqpbt, edmrqw . axr zdb irsz, nsaml, eboags

e-jubilaciones.com

2004-04-17 Thread Estudio Jurídico Previsional
Jubilaciones y Pensiones Autónomos y Monotributistas Plan de Facilidades de Pagos Ley N° 25.865 Estudio Jurídico Previsional 8 www.e-jubilaciones.com.ar ( [EMAIL PROTECTED] Si desea ser