Re: [despammed] Re: Secure remote syslogging?

2003-05-01 Thread Adam Lydick
You could hardcode the MAC using static arp entries. Also, you could just broadcast on the logger interface (which doesn't require an ARP lookup, it just uses the broadcast MAC). My concerns with this approach (although I like the sound of it) is that it might fsck up your media detection (eg: is

mgetty vulnerable?

2003-05-01 Thread Drew Scott Daniels
I don't know whether potato, woody, sarge and sid should have a security bug filed against them. According to http://packages.qa.debian.org/m/mgetty.html sid has version 1.1.30-1, sarge has version 1.1.28-5, and woody has version 1.1.27-4.1. Note that Debian packages contain changes. I have not lo

Re: Injectso to help with libc upgrades?

2003-05-01 Thread David B Harris
On Thu, 1 May 2003 18:34:17 +1000 Joshua Goodall <[EMAIL PROTECTED]> wrote: > More debianish would be some kind of additional dependency analyser > that would restart afflicated daemons on your behalf. /usr/bin/checkrestart in debian-goodies :) pgpwg3HQTonYM.pgp Description: PGP signature

Re: Injectso to help with libc upgrades?

2003-05-01 Thread Andrew Pimlott
On Wed, Apr 30, 2003 at 12:07:33PM -0500, Drew Scott Daniels wrote: > http://packetstorm.linuxsecurity.com/filedesc/injectso-0.2.1.tar.html > describes injectso, "a tool that can be used to inject shared libraries > into running processes on Linux (x86/IA32 and Sparc)...". > > Maybe I misunderstan

Re: Injectso to help with libc upgrades?

2003-05-01 Thread Andrew Pimlott
On Wed, Apr 30, 2003 at 12:07:33PM -0500, Drew Scott Daniels wrote: > http://packetstorm.linuxsecurity.com/filedesc/injectso-0.2.1.tar.html > describes injectso, "a tool that can be used to inject shared libraries > into running processes on Linux (x86/IA32 and Sparc)...". > > Maybe I misunderstan

Re: Injectso to help with libc upgrades?

2003-05-01 Thread Joshua Goodall
On Thu, 1 May 2003 03:07 am, Drew Scott Daniels wrote: > http://packetstorm.linuxsecurity.com/filedesc/injectso-0.2.1.tar.html > describes injectso, "a tool that can be used to inject shared libraries > into running processes on Linux (x86/IA32 and Sparc)...". > > Maybe I misunderstand, but might i