Re: zlib vulnerability could affect VNC

2002-03-12 Thread Michael Ossmann
On Tue, Mar 12, 2002 at 05:04:49PM +, Tim Waugh wrote: > > Right. But of course, SSH can also use zlib so make sure you upgrade > that. :-) Heh. Good point, although SSH fortunately encrypts after compression, so the risk isn't huge. But I suppose there is still a risk from authenticated

Re: zlib vulnerability could affect VNC

2002-03-12 Thread Tim Waugh
On Tue, Mar 12, 2002 at 11:53:04AM -0500, [EMAIL PROTECTED] wrote: > Looks like it could affect a lot more than VNC so that is probably the > least of your worries if you are exposing systems using zlib to the > internet. Seems like if you're running SSH it likely would protect you > from any ex

RE: zlib vulnerability could affect VNC

2002-03-12 Thread tgraham
Looks like it could affect a lot more than VNC so that is probably the least of your worries if you are exposing systems using zlib to the internet. Seems like if you're running SSH it likely would protect you from any exploit of zlib. --

Re: zlib vulnerability could affect VNC

2002-03-12 Thread Alex K. Angelopoulos
it's going to do something you can't have happen, you're welcome to modify the behavior... - Original Message - From: "Tim Waugh" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Tuesday, 2002-03-12 05:04 Subject: Re: zlib vulnerability could affect

Re: zlib vulnerability could affect VNC

2002-03-12 Thread Tim Waugh
On Mon, Mar 11, 2002 at 09:46:44PM -0600, Mike Miller wrote: > Has anyone seen this? I hope it doesn't open a security hole in VNC. > The article suggests that VNC is "potentially vulnerable." > > http://www.linuxsecurity.com/articles/security_sources_article-4582.html The reason is that many

zlib vulnerability could affect VNC

2002-03-11 Thread Mike Miller
Has anyone seen this? I hope it doesn't open a security hole in VNC. The article suggests that VNC is "potentially vulnerable." http://www.linuxsecurity.com/articles/security_sources_article-4582.html "Packages including X11, rsync, the Linux kernel, QT, mozilla, gcc, vnc, and many other progra