Re: Analysis vulnerabilities associated to published security advisories, anyone?

2005-03-09 Thread Steve Kemp
On Wed, Mar 09, 2005 at 08:05:40PM +0100, David Schmitt wrote: > On Wednesday 09 March 2005 19:13, Steve Kemp wrote: > > A simple script I wrote did that for me already - although there are > > some fixups required as we seem to have a few different spellings > > for different things. eg. sani

Re: Analysis vulnerabilities associated to published security advisories, anyone?

2005-03-09 Thread Matt Zimmerman
On Wed, Mar 09, 2005 at 12:25:06PM +0100, Javier Fernández-Sanguino Peña wrote: > I would like somebody to do a similar analysis regarding Debian's > vulnerabilities (Ubuntu vulns are probably a subset of those affecting > woody). Has anyone enough spare time? FWIW, Ubuntu vulnerabilities will

Re: Analysis vulnerabilities associated to published security advisories, anyone?

2005-03-09 Thread David Schmitt
On Wednesday 09 March 2005 19:13, Steve Kemp wrote: > A simple script I wrote did that for me already - although there are > some fixups required as we seem to have a few different spellings > for different things. eg. sanitizing vs sanitising. > > You can see the simple output here along wi

Re: Analysis vulnerabilities associated to published security advisories, anyone?

2005-03-09 Thread Steve Kemp
On Wed, Mar 09, 2005 at 12:25:06PM +0100, Javier Fern?ndez-Sanguino Pe?a wrote: > Maybe you've seen it already, but the guys at Ubuntu have done a > light-weight analysis of the vulnerabilities they have been released since > "Warty" was released: https://www.ubuntulinux.org/wiki/USNAnalysis A

Re: Analysis vulnerabilities associated to published security advisories, anyone?

2005-03-09 Thread Davor Ocelic
On Wed, 9 Mar 2005 12:25:06 +0100 Javier Fernández-Sanguino Peña <[EMAIL PROTECTED]> wrote: > Maybe you've seen it already, but the guys at Ubuntu have done a > light-weight analysis of the vulnerabilities they have been released since > "Warty" was released: https://www.ubuntulinux.org/wiki/USNAn

Analysis vulnerabilities associated to published security advisories, anyone?

2005-03-09 Thread Javier Fernández-Sanguino Peña
Maybe you've seen it already, but the guys at Ubuntu have done a light-weight analysis of the vulnerabilities they have been released since "Warty" was released: https://www.ubuntulinux.org/wiki/USNAnalysis This analysis does not match the one on ICAT's database (http://icat.nist.gov/icat.cfm?func

Re: iptables connlimit

2005-03-09 Thread Bjørn Mork
Adrian Minta <[EMAIL PROTECTED]> writes: > and a module ipt_limit.ko exist in the kernel directory ( 2.6.8-2-k7) ipt_limit != ipt_connlimit You are probably lacking kernel support for ipt_connlimit. It's not part of the Linux kernel yet, and I guess the connlimit patch isn't in Debian kernels ei