mail archive Security issues members-only posting
freebsd-security.freebsd.org
(List home) (Recent threads) (174 other FreeBSD lists)
Subscription Options
- RSS or Atom: Read-only subscription using a browser or aggregator. This is the recommended way if you don't need to send messages to the list. You can learn more about feed syndication and clients here.
- Conventional: All messages are delivered to your mail address, and you can reply. To subscribe, send an email to the list's subscribe address with "subscribe" in the subject line, or visit the list's homepage here.
- Low traffic list: less than 3 messages per day
- This list contains about 36,176 messages, beginning Feb 1995
- 1 messages added yesterday
Security issues members-only posting
April 2005
Jacques A. Vidrine — 111236538101 Apr 2005
Hello Everyone, The branches supported by the FreeBSD Security Officer have been updated to reflect recent EoL (end-of-life) events. The new list is b...
Steve Kiernan — 111236832501 Apr 2005*
I was looking at this patch, but there seems to be an error in it: unsigned char slc_reply[128]; +unsigned char const * const slc_reply_eom = ...
Strange messages in dmesg after DDoS-attack. (3 Replies)
Jesper Wallin — 111266928405 Apr 2005*
Dear list, A few days ago one of my machines were attacked by a DDoS-attack using UDP on random ports.. When I later on analyzed the logs, I found thi...
Ian G — 111272220705 Apr 2005*
I just confirmed the following bug on my firefox. http://secunia.com/advisories/14820/ Mozilla/5.0 (X11; U; FreeBSD i386; en-US; rv:1.7.5) Gecko/20050...
FreeBSD Security Advisories — 111274991806 Apr 2005
= FreeBSD-SA-05:03.amd64 Security Advisory The FreeBSD Project Topic: unprivileged hardware access on amd64 Category: core Module: sys_amd64 Announced...
About the FreeBSD Security Advisories (2 Replies)
Jesper Wallin — 111276831806 Apr 2005*
Hello.. I've noticed a delay between when the security advisories are sent and when the cvsup servers, ftp mirrors and web mirrors are updated. Is...
FreeBSD Security Advisories — 111278777906 Apr 2005*
= FreeBSD-SA-05:02.sendfile Security Advisory The FreeBSD Project Topic: sendfile kernel memory disclosure Category: core Module: sys_kern Announced: ...
Martin McCormick — 111280429706 Apr 2005
My thanks to all who have responded. I am glad to know this isn't more sinister than it appears to be. It did make me get religion and fix all the...
What is this Very Stupid DOS Attack Script? (11 Replies)
Martin McCormick — 111298919708 Apr 2005*
We have been noticing flurries of sshd reject messages in which some system out there in the hinterlands hits us with a flood of ssh login attempts. A...
Jan Grant — 111323382811 Apr 2005*
Can someone clear something up for me? [[[ # For apache to read user files, the ruleadd must give # it permissions by default. #### ${CMD} add subject...
Will 5.4 be an "Extended Life" release? (15 Replies)
Clifton Royston — 111334397212 Apr 2005*
In the next month or two I've got to upgrade a number of servers that are currently on an EOL'd version of 4-STABLE. I foresee that I'll h...
FreeBSD Security Advisories — 111353028715 Apr 2005
= FreeBSD-SA-05:04.ifconf Security Advisory The FreeBSD Project Topic: Kernel memory disclosure in ifconf() Category: core Module: sys_net Announced: ...
IPSEC l2tpd and Windows shares problem (1 Reply)
Vicky Shrestha — 111383856418 Apr 2005*
Dear all, I am running IPSEC and l2tpd in FreeBSD 4.9. I am able to connect from WindowsXP to this FreeBSD box . I am also able to ping the Hosts behi...
Fwd: (KAME-snap 9012) racoon in the kame project (4 Replies)
Mike Tancsa — 111409176221 Apr 2005*
FYI, looks like support for Racoon is ending. Does anyone have any experience with the version in ipsec-tools ? ---Mike...
Information disclosure? (15 Replies)
Jesper Wallin — 111418258922 Apr 2005*
Hello, For some reason, I thought little about the "clear" command today.. Let's say a privileged user (root) logs on, edit a sensitive ...
FreeBSD Security Advisories — 111419580022 Apr 2005
= FreeBSD-SA-05:05.cvs Security Advisory The FreeBSD Project Topic: Multiple vulnerabilities in CVS Category: contrib Module: cvs Announced: 2005-04-2...
markzero — 111470402628 Apr 2005*
Just a quick question, My system is quite heavily customised with regard to permissions and MAC labels on system binaries. Is there any way to stop ma...
RE: IPFW disconnections and resets (1 Reply)
Michael Scheidell — 111477707029 Apr 2005*
I used sysctl -a net.inet.ip.fw.enable=0 && firewall.sh && net.inet.ip.fw.enable=1 && sleep 60 && reboot and I would h...
IPFW disconnections and resets (8 Replies)
Siddhartha Jain — 111483560630 Apr 2005*
Hi, I am using IPFW on FreeBSD 4.11 I am facing two problems: - SSH sessions timeout after a while - When I run "/sbin/ipfw -q -f flush" in ...
Michael Scheidell — 111487299030 Apr 2005
I think if you recompile kernel with: options IPFIREWALL_DEFAULT_TO_ACCEPT (default is to deny) then it will work like pf and ipf. Think about it, if ...