Re: Need urgent help regarding security

2005-11-17 Thread jimmy
BNC, so I had VERY clear connection logs right in theire application directory, which is SO stupid. I turned those logs to theire ISP and they told me they would take care of the rest, don't bother for the rest, they are probably kids, and if you think it

Re: What happened with portaudit?

2005-11-06 Thread jimmy
Quoting "Simon L. Nielsen" <[EMAIL PROTECTED]>: > On 2005.11.06 21:48:52 +0100, Jimmy Scott wrote: > > On Sun, Nov 06, 2005 at 05:30:00PM +0100, Kövesdán Gábor wrote: > > > Hello, > > > > > > One of my machines I got a report about 3 vulnerab

Re: What happened with portaudit?

2005-11-06 Thread Jimmy Scott
On Sun, Nov 06, 2005 at 05:30:00PM +0100, Kövesdán Gábor wrote: > Hello, > > One of my machines I got a report about 3 vulnerable packages (php4, > ruby, openssl) in tomorrows security run output, but in today's security > run output all of them disappeared, but nobody upgraded or removed the >

Re: Non-executable stack

2005-10-29 Thread Jimmy Scott
On Sat, Oct 29, 2005 at 12:42:16PM +, db wrote: > On Saturday 29 October 2005 12:36, you wrote: > > The issue is not one of want, but one of practicality. FreeBSD updates > > to new versions of gcc relatively frequently, and having to update the > > propolice patch with each update (or waiting

Re: Non-executable stack

2005-10-27 Thread Jimmy Scott
ome time to find the bugs, report the bugs and get them fixed. And if you are willing to use it in a production environment, you have to fully test the software eacht time you are upgrading to be sure things will not break. It's also not officially supported as far as I know. Kind regards,

Re: Non-executable stack

2005-10-26 Thread jimmy
it you can disable it by default and enable it explicit when you are willing to compile a binary with it. Once applied and compiled the whole base with it enabled, you cannot just turn back! Kind regards, Jimmy Scott This message

Re: GID Games Exploits

2005-10-16 Thread Jimmy Scott
On Sun, Oct 16, 2005 at 05:04:45AM -0400, Kris Kennaway wrote: > > On Sun, Oct 16, 2005 at 10:53:19AM +0200, Jimmy Scott wrote: > > On Sun, Oct 16, 2005 at 10:15:23AM +0200, Mathieu Arnold wrote: > > > > > > +-le 16/10/2005 00:47 -0400, Kris Kennaway ?crivait : >

Re: GID Games Exploits

2005-10-16 Thread Jimmy Scott
On Sun, Oct 16, 2005 at 10:15:23AM +0200, Mathieu Arnold wrote: > > +-le 16/10/2005 00:47 -0400, Kris Kennaway écrivait : > | On Sat, Oct 15, 2005 at 09:39:27PM -0700, Stephen Major wrote: > |> It has come to my attention that there are quite a few local exploits > |> circling around in the privat

Re: FreeBSD Security Advisory FreeBSD-SA-05:21.openssl

2005-10-11 Thread jimmy
l >. > > > > > > Is there any reason why one would need to compile the whole operating > system? > > I can understand that static linked apps need to be recompiled, but which > > are there actually any at all (and linked against openssl)? > > > > Kin

Re: FreeBSD Security Advisory FreeBSD-SA-05:21.openssl

2005-10-11 Thread jimmy
mpiled, but which are there actually any at all (and linked against openssl)? Kind regards, Jimmy Scott This message has been sent through ihosting.be To report spamming or other unaccepted behavior by a iHosting customer, pleas

Re: newbie with www user security problem

2005-08-11 Thread jimmy
ition that is nosuid, and starred out password for the user 'www'. The thing you describing happens sometimes because users do not update there phpbb's either. I'm not affraid since the kiddo would have the same access than a customer, which I cannot trust either. If you don'