Login
Newsletter
Werbung

Sicherheit: Unsichere Verwendung von /tmp in ppp-off (Paket ppp)
Aktuelle Meldungen Distributionen
Name: Unsichere Verwendung von /tmp in ppp-off (Paket ppp)
ID:
Distribution: Slackware
Plattformen: Slackware -current, Slackware 7.0, Slackware 7.1
Datum: Mi, 25. Oktober 2000, 13:00
Referenzen: Keine Angabe
Applikationen: ppp

Originalnachricht

A local /tmp bug in the /usr/sbin/ppp-off program was found.  This bug
could allow a local user to corrupt system files. A fix has been made and
an updated package is now available in the -current branch.

The package described below will work for users of Slackware 7.0, 7.1, and
-current.


==================================
ppp package updated - (n1/ppp.tgz)
==================================

A local /tmp bug in the /usr/sbin/ppp-off program has been found and
fixed. The new ppp.tgz package is available from:

ppp.tgz

For verification purposes, we provide the following checksums:

16-bit "sum" checksum:
60573 191 n1/ppp.tgz

128-bit MD5 message digest:
c879dd34413a5d9cf367640206492852 n1/ppp.tgz


INSTALLATION INSTRUCTIONS FOR THE ppp.tgz PACKAGE:
--------------------------------------------------
Disable any running pppd processes:

# killall pppd

Then issue this command:

# upgradepkg ppp.tgz


Remember, it's also a good idea to backup configuration files before
upgrading packages.

- Slackware Linux Security Team
http://www.slackware.com


+------------------------------------------------------------------------+
| HOW TO REMOVE YOURSELF FROM THIS MAILING LIST: |
+------------------------------------------------------------------------+
| Send an email to majordomo@slackware.com with this text in the body of |
| the email message: |
| |
| unsubscribe slackware-security |
| |
| You will get a confirmation message back. Follow the instructions to |
| complete the unsubscription. Do not reply to this message to |
| unsubscribe! |
+------------------------------------------------------------------------+
Pro-Linux
Pro-Linux @Twitter
Neue Nachrichten
Werbung