Security
Brief items
Kernel Summit: Security
The Kernel Summit had a session on security which should be interest to readers of this page, even if you don't usually follow the kernel page. James Morris led the session and noted that a great many security features have found their way into 2.6; including the Linux security module mechanism, the crypto API, the dm-crypt target, IPSec, SELinux, NX bit support, the audit framework, and more.July CRYPTO-GRAM newsletter
Bruce Scheier's CRYPTO-GRAM newsletter for July is out; this month's topics include due process and security, cryptographers and U.S. immigration, threatening Coca-Cola cans, the CLEAR act, and the threat of portable storage devices. "Regarding the former, banning iPods and USB devices doesn't do any good...because the thief will ignore the ban. USB thumb drives are tiny. What are you going to do, strip search everyone who goes in and out of the building? The ban is a silly countermeasure that annoys all your innocent employees and doesn't faze the potentially guilty ones."
Novell Previews Liberty-based Identity Federation Solution
Novell, Inc. has announced a new Liberty-certified technology, code-named "Odyssey," that will enable organizations to federate identity information among business partners while maintaining users' privacy.
New vulnerabilities
apache mod_ssl format string vulnerability
| Package(s): | apache mod_ssl | CVE #(s): | |||||||||||||||||||||
| Created: | July 16, 2004 | Updated: | August 6, 2004 | ||||||||||||||||||||
| Description: | Triggered by a report to Packet Storm from Virulent, a format string vulnerability was found in mod_ssl, the Apache SSL/TLS interface to OpenSSL, version (up to and including) 2.8.18 for Apache 1.3. The mod_ssl in Apache 2.x is not affected. The vulnerability could be exploitable if Apache is used as a proxy for HTTPS URLs and the attacker established a own specially prepared DNS and origin server environment. | ||||||||||||||||||||||
| Alerts: |
| ||||||||||||||||||||||
l2tpd buffer overflow
| Package(s): | l2tpd | CVE #(s): | CAN-2004-0649 | ||||||||
| Created: | July 19, 2004 | Updated: | July 22, 2004 | ||||||||
| Description: | Thomas Walpuski reported a buffer overflow in l2tpd, an implementation of the layer 2 tunneling protocol, whereby a remote attacker could potentially cause arbitrary code to be executed by transmitting a specially crafted packet. The exploitability of this vulnerability has not been verified. | ||||||||||
| Alerts: |
| ||||||||||
netkit-telnet-ssl format string vulnerability
| Package(s): | netkit-telnet-ssl | CVE #(s): | CAN-2004-0640 | ||||
| Created: | July 19, 2004 | Updated: | July 21, 2004 | ||||
| Description: | b0f discovered a format string vulnerability in netkit-telnet-ssl which could potentially allow a remote attacker to cause the execution of arbitrary code with the privileges of the telnet daemon (the 'telnetd' user by default). | ||||||
| Alerts: |
| ||||||
Opera: Multiple spoofing vulnerabilities
| Package(s): | opera | CVE #(s): | |||||
| Created: | July 20, 2004 | Updated: | July 21, 2004 | ||||
| Description: | Opera fails to remove illegal characters from an URI of a link and to check
that the target frame of a link belongs to the same website as the
link. Opera also updates the address bar before loading a page.
Additionally, Opera contains a certificate verification problem.
These vulnerabilities could allow an attacker to impersonate legitimate websites to steal sensitive information from users. This could be done by obfuscating the real URI of a link or by injecting a malicious frame into an arbitrary frame of another browser window. | ||||||
| Alerts: |
| ||||||
Updated vulnerabilities
ut2003: Unreal Tournament 2003/2004 buffer overflow in 'secure' queries
| Package(s): | ut2003 | CVE #(s): | |||||
| Created: | July 19, 2004 | Updated: | July 21, 2004 | ||||
| Description: | The Unreal-based game servers support a specific type of query called 'secure'. Part of the Gamespy protocol, this query is used to ask if the game server is able to calculate an exact response using a provided string. Luigi Auriemma found that sending a long 'secure' query triggers a buffer overflow in the game server. By sending a malicious UDP-based 'secure' query, an attacker could execute arbitrary code on the game server. | ||||||
| Alerts: |
| ||||||
Resources
Users Negligence is Biggest Threat to Security
Evans Data Corporation has announced the results of its new Security Development Survey. "A quarter of developers found social engineering and lack of adherence to policies to be the biggest problem, while another 15% cite lack of qualified personnel. However, only 11% of developers felt the solutions were too complex or difficult for users. "As with any other security concern, the best technology in the world can be undone by untrained or inattentive end users, the same holds true for the development of secure computing applications and projects," said Glenn MacEwen, an analyst with Evans Data. "Until the culture of computing security evolves to encompass regular security practices, businesses and people will remain vulnerable to attack and exploitation.""
The report also finds that developers believe that implementing security does not have a negative impact on computing performance. In this editor's experience, end users cite the hassle factor as the main reason they circumvent the policies.
Securing Linux, Part 1 (IBM developerWorks)
IBM's developerWorks is running a new series on securing Linux systems. Part one has been published. "Only the paranoid survive, and that is no less true when securing Linux systems as any other. Fortunately, a host of security features are built into the kernel, are packaged with one of the many Linux distributions, or are available separately as open source applications. The first in a series, this article starts you on your way to understanding security concepts and potential threats, and sets the stage for what you really need to know: how to secure and harden a Linux-based installation."
Page editor: Rebecca Sobol
Next page:
Kernel development>>