LINUX TODAY SECURITY LETTER FOR MAY 04, 2000

Latest Security News for the Linux and Open Source Community.

___________________________ Sponsors ________________________

       This newsletter sponsored by: TurboLinux
_____________________________________________________________


------------------------------------------------------------------

TODAY'S LINUX SECURITY NEWS:

------------------------------------------------------------------

ABOUT.COM: HAVE YOU BEEN HACKED?

"It is possible that many desktop Linux users have been hacked
without even knowing so. Often, crackers won't do anything
obviously harmful to a computer system, but will instead install
a 'back door' somewhere in the system so that they can come
and go at will, using your system for their own purposes."

COMPLETE STORY:
http://linux.about.com/compute/linux/library/weekly/aa042800q-a.htm

------------------------------------------------------------------
SECURITYFOCUS: SECURITY COMPANIES CAN MAKE HEADLINES BY USING
THE RIGHT JARGON, EVEN WHEN IT'S WRONG

"I have to question the choice of words used by computer security
company ISS in its latest advisory titled Backdoor Password in
Red Hat Linux Virtual Server Package."

COMPLETE STORY:
http://www.securityfocus.com/templates/article.html?id=25

------------------------------------------------------------------
SENDMAIL.NET: SENDMAIL RELEASES BLOCKING FEATURE FOR LOVELETTER
WORM

"Sendmail has released a blocking configuration feature for the
LoveLetter worm infecting users of Microsoft Exchange, Outlook,
and Outlook Express."

COMPLETE STORY:
http://sendmail.net/?feed=lovefix

/-------------------------------------------------------------------\

"As e-commerce grows in popularity, and Web servers become
mission-critical, clustering is back on the scene as a hot and
vitally needed technology. And TurboCluster (from TurboLinux) is
taking center stage." -Sm@rt Reseller
TurboLinux.  High-Performance Linux!

http://www.turbolinux.com

\--------------------------------------------------------------adv.-/

THE STANDARD: FIRST COMES 'LOVE,' THEN COMES 'JOKE'

"Because the virus can't do any damage without a Window scripting
host, it will not affect Macintosh or Linux computers. Still,
anyone with Windows 98, Windows 2000 or Microsoft Explorer 5.0
or above is vulnerable."

COMPLETE STORY:
http://www.thestandard.com/article/display/0,1151,14808,00.html

------------------------------------------------------------------
ZDNET: OUTLOOK VULNERABILITY FEEDS MS FLAMES

"...as companies and individuals installed quick patches to
disable the virus Thursday, it became clear there was no love
lost between some computer-industry veterans and Microsoft,
Outlook's designer. Some say the technology inside Outlook
that helped replicate the love virus isn't one that all users
necessarily need, but is typical of the kind of customizable
features Microsoft likes to include in its products."

COMPLETE STORY:
http://www.zdnet.com/zdnn/stories/news/0,4586,2562729,00.html

------------------------------------------------------------------
LINUXPLANET: THERE BUT FOR THE GRACE OF BILL....

"...we should be thankful to Bill Gates for being our stunt
double. ...the current state of leading e-mail programs, from
a security standpoint, is abysmal. This is true no matter which
operating system you're using."

COMPLETE STORY:
http://www.linuxplanet.com/linuxplanet/reports/1800/1/

------------------------------------------------------------------
DATALOSS.NET: HOW WE DEFACED WWW.APACHE.ORG

"This paper does _not_ uncover any new vulnerabilities. It points
out common (and slightly less common) configuration errors,
which even the people at apache.org made. This is a general
warning. Learn from it. Fix your systems, so we won't have to :)"

COMPLETE STORY:
http://www.dataloss.net/papers/how.defaced.apache.org.txt


------------------------------------------------------------------
Visit the other sites in the Linux Channel: 
Linux Planet <http://www.linuxplanet.com>, 
LinuxStart <http://www.linuxstart.com>,
Linux Central <http://www.linuxcentral.com>,
and JustLinux <http://www.justlinux.com>. 
Also,  check out the ISP-Linux Moderated Digest 
<http://isp-lists.isp-planet.com/moderated/isp-linux/>.
------------------------------------------------------------------

---


--------------------------------------------------------------------------
Utk berhenti langganan, kirim email ke [EMAIL PROTECTED]
Informasi arsip di http://www.linux.or.id/milis.php3
Pengelola dapat dihubungi lewat [EMAIL PROTECTED]


Kirim email ke