Linux Today SECURITY LETTER FOR MAY 24, 2000 Latest Security News for the Linux and Open Source Community. ___________________________ Sponsors ________________________________ This newsletter sponsored by: TechRepublic _____________________________________________________________________ ------------------------------------------------------------------ ------------------------------------------------------------------ TODAY'S LINUX SECURITY NEWS: ------------------------------------------------------------------ SECURITYFOCUS.COM: XFREE86 XSERVER DENIAL OF SERVICE VULNERABILITY "A denial of service exists in XFree86 3.3.5, 3.3.6 and 4.0. A remote user can send a malformed packet to the TCP listening port, 6000, which will cause the X server to be unresponsive for some period of time. During this time, the keyboard will not respond to user input, and in some cases, the mouse will also not respond. During this time period, the X server will utilize 100% of the CPU, and can only be repaired by being signaled. This vulnerability exists only in servers compiled with the XCSECURITY #define set." COMPLETE STORY: http://www.securityfocus.com/vdb/bottom.html?section=discussion&vid=1235 ------------------------------------------------------------------ CNET NEWS.COM: FLAWS IN S&P SERVICE COULD PUT COMPANIES' DATA AT RISK "Beyond the security of the VPN, Friedl cited numerous security issues with the computer terminal configured and provided by ComStock, including the use of a badly outdated version of the Linux operating system." COMPLETE STORY: http://news.cnet.com/news/0-1005-200-1933917.html?tag=st /-------------------------------------------------------------------\ FREE WEB RESOURCE FOR IT PROS -- JOIN TECHREPUBLIC!Your FREE TechRepublic Passport gives you access to all content at TechRepublic.com. Plus, customize the site to your IT specialty! Got questions about Net Security? Find answers about that--and more! http://www.enlist.com/cgi-bin/re/techrepublic_com769 \--------------------------------------------------------------adv.-/ ------------------------------------------------------------------ ROOTPROMPT.ORG: SECURE DELETION OF DATA FROM MAGNETIC AND SOLID-STATE MEMORY "This paper covers some of the methods available to recover erased data and presents schemes to make this recovery significantly more difficult." COMPLETE STORY: http://rootprompt.org/article.php3?article=473 ------------------------------------------------------------------ Visit the other sites in the Linux Channel: Linux Planet <http://www.linuxplanet.com>, LinuxStart <http://www.linuxstart.com>, Linux Central <http://www.linuxcentral.com>, and JustLinux <http://www.justlinux.com>. Also, check out the ISP-Linux Moderated Digest <http://isp-lists.isp-planet.com/moderated/isp-linux/>. ------------------------------------------------------------------ To advertise on our newsletters and 125+ more at internet.com, please contact Frank Fazio: mailto:[EMAIL PROTECTED] Director, Inside Sales (203)-662-2997 ------------------------------------------------------------------ Copyright 2000 internet.com Corp. <http://www.internet.com>. ------------------------------------------------------------------ -------------------------------------------------------------------------- Utk berhenti langganan, kirim email ke [EMAIL PROTECTED] Informasi arsip di http://www.linux.or.id/milis.php3 Pengelola dapat dihubungi lewat [EMAIL PROTECTED]
