Re: Flaw in 3c59x.c or in Kernel?

2000-01-05 Thread danny
Greetings, We have had simular problems with 3c905b on a linux2.2.x box. Its a heavly used box handling a lot of packets (IRC server + WWW server). The host randomly locks up. If we catch it promptly (within a minute or so) we can config down/up the interface and its fine. Otherwise it begans

Re: Symlinks and Cryogenic Sleep

2000-01-05 Thread Mikael Olsson
I think I see a flaw with this... Goetz Babin-Ebell wrote: I did something that way: FILE *DoOpen(const char *cpFile, long bAppend) { FILE *spNew; FILE *spTest; struct stat sStat; spTest = fopen(cpFile,"a"); if (!spTest) { Log("ERR FILE OPEN",cpFile);

Re: Symlinks and Cryogenic Sleep

2000-01-05 Thread pedward
Why not do an: fd = open(file, O_RDWR); fstat(fd, fi); lstat(file, li); if (fi.st_ino == li.st_ino fi.st_dev == li.st_dev S_ISREG(fi.st_mode)) { /* it's a real, plain, file */ } That guarantees that the directory structure reflects your file descriptor. The method below has a

Re: Symlinks and Cryogenic Sleep

2000-01-05 Thread Henrik Nordstrom
Mark A. Heilpern wrote: Maybe I'm just naive, but it's my understanding that you cannot send signals to a process you don't own unless you are root. You can if you control the pty where the program is running. Then simulate susp characters (usually ^Z) to generate SIGTSTP, break (^C) to

SECURITY ALERT - WAR FTP DAEMON ALL VERSIONS

2000-01-05 Thread Jarle Aase
There has been reported a serious security problem with War FTP Daemon 1.70. The problem may also affect 1.6* and previous versions. I am currently researching the problem, and will post an upgrade for 1.6* within 24 hours if that version is affected. A fix for 1.70 is in the works, but will

Re: Flaw in 3c59x.c or in Kernel?

2000-01-05 Thread Sonny Parlin
The only problem I have with ifconfiging down/up is that every time I've run my test, the machine completely locks, no keyboard, no nothing... So ifconfig is not an option at that point. Unfortunately, when it crashes, it crashes BIG. Also, I should have mentioned in my first mail that when using

Re: vibackup.sh

2000-01-05 Thread Kris Kennaway
This has just been fixed in FreeBSD 2.2-STABLE, 3.4-STABLE and 4.0-CURRENT. Thanks! Kris On Fri, 31 Dec 1999, Loneguard wrote: Looks like someone noticed this at some point in OpenBSD. Its broken rather than fixed ;( #!/bin/sh # # vibackup.sh - Loneguard 22/05/99 # Open/FreeBSD/Debian

Re: Symlinks and Cryogenic Sleep

2000-01-05 Thread John Cochran
der Mouse [EMAIL PROTECTED] wrote: [symlink-paranoia code] However, consider an average setuid root application, [...]. When the application reaches the critical section of code between the lstat and the open, you stop it by sending it a SIGSTOP. If you can send it a SIGSTOP, either

Security problem with Solstice Backup/Legato Networker recover command

2000-01-05 Thread Chris Siebenmann
The 'recover' command in Solstice Backup (Sun's relabeled version of Legato Networker) on a Unix machine authorized to perform restore operations from the backup server can be used to by a normal user to restore any file accessible to the machine in a readable-to-them state (although it cannot

Re: Symlinks and Cryogenic Sleep

2000-01-05 Thread Christos Zoulas
On Jan 4, 12:11pm, [EMAIL PROTECTED] (Goetz Babin-Ebell) wrote: -- Subject: Re: Symlinks and Cryogenic Sleep | At 21:24 03.01.00 +0100, Olaf Kirch wrote: | Hi all, | Hallo Olaf, | | when you're dealing with files in /tmp that are supposed to be re-opened | (rather than opened once and then

Re: Flaw in 3c59x.c or in Kernel?

2000-01-05 Thread David Malone
On Tue, Jan 04, 2000 at 09:21:36AM -0500, Sonny Parlin wrote: eth1: Too much work in interrupt, status e481. Temporarily disabling functions(7b7e). We saw this with some Linux machines in college that were connected to busy 100Mb/s ethernet. Bill Paul is right when he says ifconfiging down

Re: Symlinks and Cryogenic Sleep

2000-01-05 Thread Marc Heuse
Hi, when you're dealing with files in /tmp that are supposed to be re-opened (rather than opened once and then discarded) there's an established way to do it which goes like this: if (lstat(fname, stb1) = 0 S_ISREG(stb1.st_mode)) { fd = open(fname, O_RDWR);

JS problem in NS4.5 - known?

2000-01-05 Thread Nick Phillips
Interestingly enough, when I just read Edwin Gonzalez' message (re: JS and Hotmail) in Messenger 4.5 (the most recent available version under Debian "slink"), I got a Javascript alert box appear. This despite the fact that according to my preferences, javascript is turned off for Mail News.

Re: Hotmail security hole - injecting JavaScript using IMG

2000-01-05 Thread Metal Hurlant
On Wed, 05 Jan 2000, Henrik Nordstrom wrote: What is more suprising is why it is so hard to make a JavaScript scrubber filter. The ways javascript may be inserted in HTML is generic, and not tied to any specific tag or attributes. (see Netscape JavaScript client guide, chapter 9) script

Re: Symlinks and Cryogenic Sleep

2000-01-05 Thread Marc Heuse
Hi, when you're dealing with files in /tmp that are supposed to be re-opened (rather than opened once and then discarded) there's an established way to do it which goes like this: [...] I did something that way: oh, not a good idea: FILE *DoOpen(const char *cpFile, long bAppend) { FILE

Re: Subscription bomb tracing - feature request.

2000-01-05 Thread M. Dodge Mumford
On Tue, 4 Jan 2000, Alan Brown wrote: I've only ever seen one mailing list which actually showed where the signup request came from. Times are still changing and adding an audit trail would make life easier all round. FWIW, ezmlm (http://pobox.com/~djb/ezmlm.html) does this by default. It

Re: Symlinks and Cryogenic Sleep

2000-01-05 Thread Pavel Machek
Hi! when you're dealing with files in /tmp that are supposed to be re-opened (rather than opened once and then discarded) there's an established way to do it which goes like this: if (lstat(fname, stb1) = 0 S_ISREG(stb1.st_mode)) { fd = open(fname, O_RDWR);

Re: L0pht Advisory: RH Linux 6.0/6.1, PAM and userhelper

2000-01-05 Thread cogNiTioN
On Tue, 4 Jan 2000, Dildog wrote: L0pht Security Advisory Advisory Name: PamSlam Advisory Released: [01/04/00] Application: userhelper and PAM on Redhat Linux 6.0/6.1 [...] Description: The combination of the fact that both userhelper

Re: Symlinks and Cryogenic Sleep

2000-01-05 Thread Casper Dik
When the application reaches the critical section of code between the lstat and the open, you stop it by sending it a SIGSTOP. You record the device and inode number of your /tmp file, remove it, and wait. The ploy should fail right here: as far as I'm aware, this protection only works on sticky