LinuxQuestions.org
LinuxAnswers - the LQ Linux tutorial section.
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Security
User Name
Password
Linux - Security This forum is for all security related questions.
Questions, tips, system compromises, firewalls, etc. are all included here.

Notices

Reply
 
Search this Thread
Old 03-03-2002, 04:20 AM   #1
nikhiljosh
Member
 
Registered: Jun 2001
Posts: 126

Rep: Reputation: 16
Exclamation Flaw weakens Linux security software


http://news.com.com/2100-1001-848467.html
http://www.netfilter.org/security/20...-dcc-mask.html
http://news.com.com/2100-1001-835602.html
http://www.redhat.com/support/errata/RHSA-2002-028.html

By Stephen Shankland
Staff Writer, CNET News.com
February 28, 2002, 5:30 PM PT


Programmers have found a vulnerability in Linux that could allow protective
firewall software to grant malicious computer users access to protected
networks.
The flaw, which affects versions 2.4.14 through 2.4.18-pre9 of the Linux
kernel, is in a component of the Netfilter firewall software. The component
is involved when two computer users chat directly with each other using the
Internet Relay Chat (IRC) system.
Information sent across the Internet is broken up into tiny "packets," each
with "from" and "to" addresses, indicating who's sent the information and
where it's intended to go. So-called firewall software transmits or screens
out these packets based on the address of the sender.


Netfilter, among the new aspects of the 2.4 version of the Linux kernel, is
software that runs within the kernel to filter out unwanted packets. But its
IRC helper component configures firewall settings too broadly, potentially
allowing communication from IP (Internet Protocol) addresses that should be
blocked.
Programmers working on the Netfilter firewall software project reported the
problem Monday.
Versions 7.1 and 7.2 of leading Linux seller Red Hat's product are
vulnerable. The Durham, N.C.-based company issued a patch Thursday that
corrects the problem. The flawed software isn't installed by default on the
Red Hat versions, the company said, but some users may have added it.
Security is a nagging concern for the computer industry, which must juggle
new features with the risk that they open up new problems. While the
firewall problem the Netfilter programmers discovered is limited to a few
versions of Linux, a more serious problem emerged earlier this month
affecting numerous operating systems using standard network management
software.
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
Mozilla Linux Command Line URL Parsing Security Flaw Reported win32sux Linux - Security 9 10-06-2005 06:39 AM
firefox 1.0.6 - critical security flaw slackhack Linux - Security 3 09-23-2005 01:13 AM
News: Spoofing Is a Security Flaw ?? m_shroom Linux - Security 1 11-05-2004 08:57 PM
New Win XP Security Flaw ranger_nemo Linux - Security 9 02-25-2003 06:58 AM
Is this a Linux security flaw ? josedsilva Linux - Security 3 05-24-2002 12:03 AM


All times are GMT -5. The time now is 11:40 AM.

Main Menu
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
identi.ca: @linuxquestions
Facebook: linuxquestions Google+: linuxquestions
Open Source Consulting | Domain Registration