ISG-news July 2006

isg-news@lists.phys.ethz.ch

1 participants
11 discussions

ISG Newsletter
by ISG Department Physik 29 Jul '06

29 Jul '06

------------------------------------------------------------------------ New or updated readmes How to Use The Scanners http://nic.phys.ethz.ch/readme/214 ------------------------------------------------------------------------ ISG News Mailinglist Go to https://webmail.phys.ethz.ch/mailman/listinfo/isg-news to unsubscribe or change your settings. ISG Department Physik <isg(a)phys.ethz.ch>

1 0

ISG Newsletter
by ISG Department Physik 27 Jul '06

27 Jul '06

------------------------------------------------------------------------ Integration of SpamAssassin into Mailman a Success http://nic.phys.ethz.ch/news/1153914874 About six weeks ago, we [1]integrated SpamAssassin into Mailman which we use as software for our mailing lists. During those six weeks we could gather experience on how good the system works. References 1. http://nic.phys.ethz.ch/news/1150291968/index_html ------------------------------------------------------------------------ New or updated readmes Readme http://nic.phys.ethz.ch/readme/1 How to Use The Scanners http://nic.phys.ethz.ch/readme/214 ------------------------------------------------------------------------ ISG News Mailinglist Go to https://webmail.phys.ethz.ch/mailman/listinfo/isg-news to unsubscribe or change your settings. ISG Department Physik <isg(a)phys.ethz.ch>

1 0

ISG Newsletter
by ISG Department Physik 26 Jul '06

26 Jul '06

------------------------------------------------------------------------ New or updated readmes How to start with Subversion http://nic.phys.ethz.ch/readme/213 ------------------------------------------------------------------------ ISG News Mailinglist Go to https://webmail.phys.ethz.ch/mailman/listinfo/isg-news to unsubscribe or change your settings. ISG Department Physik <isg(a)phys.ethz.ch>

1 0

ISG Newsletter
by ISG Department Physik 25 Jul '06

25 Jul '06

------------------------------------------------------------------------ New or updated readmes Readme http://nic.phys.ethz.ch/readme/1 How to start with Subversion http://nic.phys.ethz.ch/readme/213 ------------------------------------------------------------------------ ISG News Mailinglist Go to https://webmail.phys.ethz.ch/mailman/listinfo/isg-news to unsubscribe or change your settings. ISG Department Physik <isg(a)phys.ethz.ch>

1 0

ISG Newsletter
by ISG Department Physik 18 Jul '06

18 Jul '06

------------------------------------------------------------------------ Yet Another Local Root Exploit in Linux Kernel 2.6 http://nic.phys.ethz.ch/news/1153139440 Although there was a [1]local root exploit fixed recently in some versions of the Linux 2.6 Kernel which resulted in Kernel 2.6.17.4, [2]on Friday night another [3]local root exploit using a [4]race condition in the [5]/proc file system ([6]CVE-2006-3626) became public, this time concerning all previous 2.6 kernels. So on Saturday morning Kernel [7]2.6.17.5 has been released, which fixed this vulnerability. Then the developers noticed that the fix was "a bit to draconic" which means that in some cases it prevented to much, and released [8]2.6.17.6 on Sunday. So if you run a computer using a Linux 2.6 Kernel less than 2.6.17.5, please update as soon as possible to 2.6.17.6. If you have already updated to Kernel 2.6.17.5 this weekend and it works for you, it's fine, too. References 1. http://nic.phys.ethz.ch/news/1152791277/index_html 2. http://seclists.org/lists/fulldisclosure/2006/Jul/0312.html 3. http://seclists.org/lists/fulldisclosure/2006/Jul/att-0312/h00lyshit_c 4. http://en.wikipedia.org/wiki/Race_condition 5. http://en.wikipedia.org/wiki/Proc_file_system 6. http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-3626 7. http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.17.5 8. http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.17.6 ------------------------------------------------------------------------ ISG News Mailinglist Go to https://webmail.phys.ethz.ch/mailman/listinfo/isg-news to unsubscribe or change your settings. ISG Department Physik <isg(a)phys.ethz.ch>

1 0

ISG Newsletter
by ISG Department Physik 14 Jul '06

14 Jul '06

------------------------------------------------------------------------ Local Root Exploit in Linux 2.6.13 to 2.6.17.3 http://nic.phys.ethz.ch/news/1152791277 As Paul Starzetz [1]recently noted on Full Disclosure, the vulnerability [2]CVE-2006-2451 / [3]BID 18874 in the [4]Linux Kernel 2.6.13 up to 2.6.17.3 and 2.6.16.23 is not only a [5]Denial of Service vulnerability as [6]described in some advisories, but can also be used to get root access as a normal local user (and via SSH of course also remotely). The vulnerability has been fixed in kernel versions [7]2.6.17.4 and [8]2.6.16.24, but an easy to understand [9]exploit has been posted to the security mailing list Bugtraq, so it won't take long until script kiddies will try to use it where ever they can. So if you run one or more boxes with Linux Kernel 2.6 in your group or institute which is not managed by us, please upgrade the kernel as soon as possible to prevent hostile take-overs of these boxes. Most of the workstations managed by [10]us still run Linux Kernel 2.4 which is not affected and those which run Linux Kernel 2.6 have been already updated. References 1. http://lists.grok.org.uk/pipermail/full-disclosure/2006-July/047762.html 2. http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-2451 3. http://www.securityfocus.com/bid/18874 4. http://www.kernel.org/ 5. http://en.wikipedia.org/wiki/Denial-of-service_attack 6. http://lists.grok.org.uk/pipermail/full-disclosure/2006-July/047726.html 7. http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.17.4 8. http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.16.24 9. http://www.securityfocus.com/archive/1/439869 10. http://nic.phys.ethz.ch/contact/ ------------------------------------------------------------------------ ISG News Mailinglist Go to https://webmail.phys.ethz.ch/mailman/listinfo/isg-news to unsubscribe or change your settings. ISG Department Physik <isg(a)phys.ethz.ch>

1 0

ISG Newsletter
by ISG Department Physik 13 Jul '06

13 Jul '06

------------------------------------------------------------------------ Microsoft Security Bulletin for July 2006 http://nic.phys.ethz.ch/news/1152709107 Last night [1]Microsoft has released the [2]Security Bulletin Summary for July, 2006. There are 5 critical and 2 important update. If Automatic Update is not activated yet, then you must visit [3]Microsoft Update to install the Security Updates. Also updates for MS Office are available, see Office Update at [4]Office Online. This time some very critical updates for all versions of Windows and also very critical updates for MS Office (including the Mac OS X version) need to be installed. We recommand to do the updates right now! References 1. http://www.microsoft.com/ 2. http://www.microsoft.com/technet/security/bulletin/ms06-jul.mspx 3. http://update.microsoft.com/microsoftupdate/ 4. http://office.microsoft.com/ ------------------------------------------------------------------------ ISG News Mailinglist Go to https://webmail.phys.ethz.ch/mailman/listinfo/isg-news to unsubscribe or change your settings. ISG Department Physik <isg(a)phys.ethz.ch>

1 0

ISG Newsletter
by ISG Department Physik 11 Jul '06

11 Jul '06

------------------------------------------------------------------------ New or updated readmes Changes with the Debian Linux Upgrade http://nic.phys.ethz.ch/readme/85 ------------------------------------------------------------------------ ISG News Mailinglist Go to https://webmail.phys.ethz.ch/mailman/listinfo/isg-news to unsubscribe or change your settings. ISG Department Physik <isg(a)phys.ethz.ch>

1 0

ISG Newsletter
by ISG Department Physik 08 Jul '06

08 Jul '06

------------------------------------------------------------------------ New or updated readmes Readme http://nic.phys.ethz.ch/readme/1 VLANs http://nic.phys.ethz.ch/readme/65 ------------------------------------------------------------------------ ISG News Mailinglist Go to https://webmail.phys.ethz.ch/mailman/listinfo/isg-news to unsubscribe or change your settings. ISG Department Physik <isg(a)phys.ethz.ch>

1 0

ISG Newsletter
by ISG Department Physik 07 Jul '06

07 Jul '06

------------------------------------------------------------------------ New or updated readmes Configuring a Printer http://nic.phys.ethz.ch/readme/28 ------------------------------------------------------------------------ ISG News Mailinglist Go to https://webmail.phys.ethz.ch/mailman/listinfo/isg-news to unsubscribe or change your settings. ISG Department Physik <isg(a)phys.ethz.ch>

1 0

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

2003

2002

ISG-news July 2006