----- Original Message ----- From: "Linux Mandrake Security Team" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Jumat, 03 Nopember 2000 5:22 Subject: MDKSA-2000:065 - Linux-Mandrake not affected by dump > -----BEGIN PGP SIGNED MESSAGE----- > Hash: SHA1 > > ________________________________________________________________________ > > Linux-Mandrake Security Update Advisory > ________________________________________________________________________ > > Package name: dump > Date: November 2nd, 2000 > Advisory ID: MDKSA-2000:065 > > Affected versions: None > ________________________________________________________________________ > > Problem Description: > > In some instances, if dump is suid root, it can be used to gain root > access. Two exploits have been published to prove this. > ________________________________________________________________________ > > Linux-Mandrake ships dump suid root, however both exploits do not work > under Linux-Mandrake. The end result is a shell that is suid by the > user attempting the exploit, and not suid root which is the intended > result. > ________________________________________________________________________ > > You can view other security advisories for Linux-Mandrake at: > > http://www.linux-mandrake.com/en/security/ > > If you want to report vulnerabilities, please contact > > [EMAIL PROTECTED] > ________________________________________________________________________ > > Linux-Mandrake has two security-related mailing list services that > anyone can subscribe to: > > [EMAIL PROTECTED] > > Linux-Mandrake's security announcements mailing list. Only > announcements are sent to this list and it is read-only. > > [EMAIL PROTECTED] > > Linux-Mandrake's security discussion mailing list. This list is open > to anyone to discuss Linux-Mandrake security specifically and Linux > security in general. > > To subscribe to either list, send a message to > [EMAIL PROTECTED] > with "subscribe [listname]" in the body of the message. > > To remove yourself from either list, send a message to > [EMAIL PROTECTED] > with "unsubscribe [listname]" in the body of the message. > > To get more information on either list, send a message to > [EMAIL PROTECTED] > with "info [listname]" in the body of the message. > > Optionally, you can use the web interface to subscribe to or unsubscribe > from either list: > > http://www.linux-mandrake.com/en/flists.php3#security > ________________________________________________________________________ > > Type Bits/KeyID Date User ID > pub 1024D/22458A98 2000-07-10 Linux Mandrake Security Team > <[EMAIL PROTECTED]> > > > - -----BEGIN PGP PUBLIC KEY BLOCK----- > Version: GnuPG v1.0.1 (GNU/Linux) > Comment: For info see http://www.gnupg.org > > mQGiBDlp594RBAC2tDozI3ZgQsE7XwxurJCJrX0L5vx7SDByR5GHDdWekGhdiday > L4nfUax+SeR9SCoCgTgPW1xB8vtQc8/sinJlMjp9197a2iKM0FOcPlkpa3HcOdt7 > WKJqQhlMrHvRcsivzcgqjH44GBBJIT6sygUF8k0lU6YnMHj5MPc/NGWt8wCg9vKo > P0l5QVAFSsHtqcU9W8cc7wMEAJzQsAlnvPXDBfBLEH6u7ptWFdp0GvbSuG2wRaPl > hynHvRiE01ZvwbJZXsPsKm1z7uVoW+NknKLunWKB5axrNXDHxCYJBzY3jTeFjsqx > PFZkIEAQphLTkeXXelAjQ5u9tEshPswEtMvJvUgNiAfbzHfPYmq8D6x5xOw1IySg > 2e/LBACxr2UJYCCB2BZ3p508mAB0RpuLGukq+7UWiOizy+kSskIBg2O7sQkVY/Cs > iyGEo4XvXqZFMY39RBdfm2GY+WB/5NFiTOYJRKjfprP6K1YbtsmctsX8dG+foKsD > LLFs7OuVfaydLQYp1iiN6D+LJDSMPM8/LCWzZsgr9EKJ8NXiyrQ6TGludXggTWFu > ZHJha2UgU2VjdXJpdHkgVGVhbSA8c2VjdXJpdHlAbGludXgtbWFuZHJha2UuY29t > PohWBBMRAgAWBQI5aefeBAsKBAMDFQMCAxYCAQIXgAAKCRCaqNDQIkWKmK6LAKCy > /NInDsaMSI+WHwrquwC5PZrcnQCeI+v3gUDsNfQfiKBvQSANu1hdulq5AQ0EOWnn > 7xAEAOQlTVY4TiNo5V/iP0J1xnqjqlqZsU7yEBKo/gZz6/+hx75RURe1ebiJ9F77 > 9FQbpJ9Epz1KLSXvq974rnVb813zuGdmgFyk+ryA/rTR2RQ8h+EoNkwmATzRxBXV > Jb57fFQjxOu4eNjZAtfII/YXb0uyXXrdr5dlJ/3eXrcO4p0XAAMFBACCxo6Z269s > +A4v8C6Ui12aarOQcCDlV8cVG9LkyatU3FNTlnasqwo6EkaP572448weJWwN6SCX > Vl+xOYLiK0hL/6Jb/O9Agw75yUVdk+RMM2I4fNEi+y4hmfMh2siBv8yEkEvZjTcl > 3TpkTfzYky85tu433wmKaLFOv0WjBFSikohGBBgRAgAGBQI5aefvAAoJEJqo0NAi > RYqYid0AoJgeWzXrEdIClBOSW5Q6FzqJJyaqAKC0Y9YI3UFlE4zSIGjcFlLJEJGX > lA== > =WxWn > - -----END PGP PUBLIC KEY BLOCK----- > > -----BEGIN PGP SIGNATURE----- > Version: GnuPG v1.0.4 (GNU/Linux) > Comment: For info see http://www.gnupg.org > > iD8DBQE6AekkmqjQ0CJFipgRAtgqAKCYYCMo11NCqZAl/u6ADyPwQ9lsCgCggGVq > eqnMM1uJ02KLTHgvWB7/m6w= > =r6V5 > -----END PGP SIGNATURE----- > -------------------------------------------------------------------------- Utk berhenti langganan, kirim email ke [EMAIL PROTECTED] Informasi arsip di http://www.linux.or.id/milis.php3 Pengelola dapat dihubungi lewat [EMAIL PROTECTED]
