Re: Kernel 2.4.21 Forwarding table vulnerability

2003-07-28 Thread Marcin Owsiany
On Mon, Jul 28, 2003 at 11:38:51AM -0700, Bruce Banner wrote: > When were they patched? And how do I know when they > are patched and when they are available? Is there > somewhere I can find this info? You could subscribe to debian-changes@lists.debian.org See http://lists.debian.org/debian-chang

Re: Kernel 2.4.21 Forwarding table vulnerability

2003-07-28 Thread Marcin Owsiany
On Mon, Jul 28, 2003 at 11:38:51AM -0700, Bruce Banner wrote: > When were they patched? And how do I know when they > are patched and when they are available? Is there > somewhere I can find this info? You could subscribe to [EMAIL PROTECTED] See http://lists.debian.org/debian-changes/ Marcin PS

Re: Kernel 2.4.21 Forwarding table vulnerability

2003-07-28 Thread Bruce Banner
Thanks for the info. I don't like depending on Red Hat for security fixes. I want to rely on Debian for this kind of stuff I just didn't know where to find it. Thanks --- Ulrich Scholler <[EMAIL PROTECTED]> wrote: > Hi Bruce, > > On Mon Jul 28, 2003 at 11:38:51 -0700, Bruce Banner > wrote: > >

Re: Kernel 2.4.21 Forwarding table vulnerability

2003-07-28 Thread Ulrich Scholler
Hi Bruce, On Mon Jul 28, 2003 at 11:38:51 -0700, Bruce Banner wrote: > When were they patched? And how do I know when they > are patched and when they are available? Is there > somewhere I can find this info? I found the Red Hat > info on Bugtraq but there was no mention of Debian > Source anywh

Re: Kernel 2.4.21 Forwarding table vulnerability

2003-07-28 Thread Bruce Banner
When were they patched? And how do I know when they are patched and when they are available? Is there somewhere I can find this info? I found the Red Hat info on Bugtraq but there was no mention of Debian Source anywhere. Thanks --- Matthijs Mohlmann <[EMAIL PROTECTED]> wrote: > Why download t

Re: Kernel 2.4.21 Forwarding table vulnerability

2003-07-28 Thread Bruce Banner
Thanks for the info. I don't like depending on Red Hat for security fixes. I want to rely on Debian for this kind of stuff I just didn't know where to find it. Thanks --- Ulrich Scholler <[EMAIL PROTECTED]> wrote: > Hi Bruce, > > On Mon Jul 28, 2003 at 11:38:51 -0700, Bruce Banner > wrote: > >

Re: Kernel 2.4.21 Forwarding table vulnerability

2003-07-28 Thread Ulrich Scholler
Hi Bruce, On Mon Jul 28, 2003 at 11:38:51 -0700, Bruce Banner wrote: > When were they patched? And how do I know when they > are patched and when they are available? Is there > somewhere I can find this info? I found the Red Hat > info on Bugtraq but there was no mention of Debian > Source anywh

Re: Kernel 2.4.21 Forwarding table vulnerability

2003-07-28 Thread Matthijs Mohlmann
Why download the source from RedHat? The source from debian is also patched with needed patches. apt-get install kernel-source On Mon, 2003-07-28 at 19:05, Bruce Banner wrote: > You can download Red Hats > kernel-source-2.4.20-19.9.i386.rpm run alien against > it and install the dpkg'ed kernel-

Re: Kernel 2.4.21 Forwarding table vulnerability

2003-07-28 Thread Bruce Banner
You can download Red Hats kernel-source-2.4.20-19.9.i386.rpm run alien against it and install the dpkg'ed kernel-source.deb. I have been forced to do this in the past to get patches that havn't been released or in the main stream kernel from kernel.org yet. Peace --- Phillip Hofmeister <[EMAIL

Re: Kernel 2.4.21 Forwarding table vulnerability

2003-07-28 Thread Bruce Banner
When were they patched? And how do I know when they are patched and when they are available? Is there somewhere I can find this info? I found the Red Hat info on Bugtraq but there was no mention of Debian Source anywhere. Thanks --- Matthijs Mohlmann <[EMAIL PROTECTED]> wrote: > Why download t

Re: Kernel 2.4.21 Forwarding table vulnerability

2003-07-28 Thread Florian Weimer
Herbert Xu <[EMAIL PROTECTED]> writes: >>> CAN-2003-0552: Jerry Kreuscher discovered that the Forwarding table >>> could be spoofed by sending forged packets with bogus source >>> addresses the same as the local host. >> >> Ah, this one. I don't even know if it's about IP. >> >> As usual, Red H

Re: Kernel 2.4.21 Forwarding table vulnerability

2003-07-28 Thread Matthijs Mohlmann
Why download the source from RedHat? The source from debian is also patched with needed patches. apt-get install kernel-source On Mon, 2003-07-28 at 19:05, Bruce Banner wrote: > You can download Red Hats > kernel-source-2.4.20-19.9.i386.rpm run alien against > it and install the dpkg'ed kernel-

Re: Kernel 2.4.21 Forwarding table vulnerability

2003-07-28 Thread Bruce Banner
You can download Red Hats kernel-source-2.4.20-19.9.i386.rpm run alien against it and install the dpkg'ed kernel-source.deb. I have been forced to do this in the past to get patches that havn't been released or in the main stream kernel from kernel.org yet. Peace --- Phillip Hofmeister <[EMAIL

Re: Kernel 2.4.21 Forwarding table vulnerability

2003-07-28 Thread Bruce Banner
Beware there is also a vulnerability in the spanning tree implementation as well so. Peace --- Phillip Hofmeister <[EMAIL PROTECTED]> wrote: > If I do use bridging...is there a patch? > > What is the consequences of an unpatched system? (In > more detail than > below) > > On Mon, 28 Jul 2003 a

Re: Kernel 2.4.21 Forwarding table vulnerability

2003-07-28 Thread Florian Weimer
Herbert Xu <[EMAIL PROTECTED]> writes: >>> CAN-2003-0552: Jerry Kreuscher discovered that the Forwarding table >>> could be spoofed by sending forged packets with bogus source >>> addresses the same as the local host. >> >> Ah, this one. I don't even know if it's about IP. >> >> As usual, Red H

Re: Kernel 2.4.21 Forwarding table vulnerability

2003-07-28 Thread Phillip Hofmeister
If I do use bridging...is there a patch? What is the consequences of an unpatched system? (In more detail than below) On Mon, 28 Jul 2003 at 07:39:53PM +1000, Herbert Xu wrote: > Florian Weimer <[EMAIL PROTECTED]> wrote: > > Bruce Banner <[EMAIL PROTECTED]> writes: > > > >> CAN-2003-0552: Jerry

Re: Kernel 2.4.21 Forwarding table vulnerability

2003-07-28 Thread Bruce Banner
Beware there is also a vulnerability in the spanning tree implementation as well so. Peace --- Phillip Hofmeister <[EMAIL PROTECTED]> wrote: > If I do use bridging...is there a patch? > > What is the consequences of an unpatched system? (In > more detail than > below) > > On Mon, 28 Jul 2003 a

Re: Kernel 2.4.21 Forwarding table vulnerability

2003-07-28 Thread Phillip Hofmeister
If I do use bridging...is there a patch? What is the consequences of an unpatched system? (In more detail than below) On Mon, 28 Jul 2003 at 07:39:53PM +1000, Herbert Xu wrote: > Florian Weimer <[EMAIL PROTECTED]> wrote: > > Bruce Banner <[EMAIL PROTECTED]> writes: > > > >> CAN-2003-0552: Jerry

Re: Kernel 2.4.21 Forwarding table vulnerability

2003-07-28 Thread Bruce Banner
Thanks, --- Herbert Xu <[EMAIL PROTECTED]> wrote: > Florian Weimer <[EMAIL PROTECTED]> wrote: > > Bruce Banner <[EMAIL PROTECTED]> writes: > > > >> CAN-2003-0552: Jerry Kreuscher discovered that > the Forwarding table > >> could be spoofed by sending forged packets with > bogus source > >> addre

Re: Kernel 2.4.21 Forwarding table vulnerability

2003-07-28 Thread Herbert Xu
Florian Weimer <[EMAIL PROTECTED]> wrote: > Bruce Banner <[EMAIL PROTECTED]> writes: > >> CAN-2003-0552: Jerry Kreuscher discovered that the Forwarding table >> could be spoofed by sending forged packets with bogus source >> addresses the same as the local host. > > Ah, this one. I don't even kn

Re: Kernel 2.4.21 Forwarding table vulnerability

2003-07-28 Thread Bruce Banner
Thanks, --- Herbert Xu <[EMAIL PROTECTED]> wrote: > Florian Weimer <[EMAIL PROTECTED]> wrote: > > Bruce Banner <[EMAIL PROTECTED]> writes: > > > >> CAN-2003-0552: Jerry Kreuscher discovered that > the Forwarding table > >> could be spoofed by sending forged packets with > bogus source > >> addre

Re: Kernel 2.4.21 Forwarding table vulnerability

2003-07-28 Thread Herbert Xu
Florian Weimer <[EMAIL PROTECTED]> wrote: > Bruce Banner <[EMAIL PROTECTED]> writes: > >> CAN-2003-0552: Jerry Kreuscher discovered that the Forwarding table >> could be spoofed by sending forged packets with bogus source >> addresses the same as the local host. > > Ah, this one. I don't even kn

Re: Kernel 2.4.21 Forwarding table vulnerability

2003-07-27 Thread Florian Weimer
Bruce Banner <[EMAIL PROTECTED]> writes: > CAN-2003-0552: Jerry Kreuscher discovered that the Forwarding table > could be spoofed by sending forged packets with bogus source > addresses the same as the local host. Ah, this one. I don't even know if it's about IP. As usual, Red Hat's advisory is

Re: Kernel 2.4.21 Forwarding table vulnerability

2003-07-27 Thread Bruce Banner
CAN-2003-0552: Jerry Kreuscher discovered that the Forwarding table could be spoofed by sending forged packets with bogus source addresses the same as the local host. --- Florian Weimer <[EMAIL PROTECTED]> wrote: > Bruce Banner <[EMAIL PROTECTED]> writes: > > > What impact does the Forwardi

Re: Kernel 2.4.21 Forwarding table vulnerability

2003-07-27 Thread Florian Weimer
Bruce Banner <[EMAIL PROTECTED]> writes: > What impact does the Forwarding Table Vulnerability of > late have? Which vulnerability are you talking about? Do you have CVE name for it?

Re: Kernel 2.4.21 Forwarding table vulnerability

2003-07-27 Thread Florian Weimer
Bruce Banner <[EMAIL PROTECTED]> writes: > CAN-2003-0552: Jerry Kreuscher discovered that the Forwarding table > could be spoofed by sending forged packets with bogus source > addresses the same as the local host. Ah, this one. I don't even know if it's about IP. As usual, Red Hat's advisory is

Kernel 2.4.21 Forwarding table vulnerability

2003-07-27 Thread Bruce Banner
What impact does the Forwarding Table Vulnerability of late have? Is this only a problem if you have ip forwarding enabled and setup as a router or is this part of the normal ip stack functions that affects the kernel no matter what services you are running on your server? I can't find any info o

Re: Kernel 2.4.21 Forwarding table vulnerability

2003-07-27 Thread Bruce Banner
CAN-2003-0552: Jerry Kreuscher discovered that the Forwarding table could be spoofed by sending forged packets with bogus source addresses the same as the local host. --- Florian Weimer <[EMAIL PROTECTED]> wrote: > Bruce Banner <[EMAIL PROTECTED]> writes: > > > What impact does the Forwardi

Re: Kernel 2.4.21 Forwarding table vulnerability

2003-07-27 Thread Florian Weimer
Bruce Banner <[EMAIL PROTECTED]> writes: > What impact does the Forwarding Table Vulnerability of > late have? Which vulnerability are you talking about? Do you have CVE name for it? -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECT

Kernel 2.4.21 Forwarding table vulnerability

2003-07-27 Thread Bruce Banner
What impact does the Forwarding Table Vulnerability of late have? Is this only a problem if you have ip forwarding enabled and setup as a router or is this part of the normal ip stack functions that affects the kernel no matter what services you are running on your server? I can't find any info o