From owner-freebsd-announce Mon Jul 16 14: 1: 9 2001 Delivered-To: freebsd-announce@freebsd.org Received: from usenix.org (voyager.usenix.org [131.106.3.1]) by hub.freebsd.org (Postfix) with ESMTP id EB45837B406 for ; Mon, 16 Jul 2001 13:56:47 -0700 (PDT) (envelope-from tiffany@usenix.org) Received: from [131.106.3.42] (tiffany.usenix.org [131.106.3.42]) by usenix.org (Switch-2.1.3/Switch-2.1.0) with ESMTP id f6GKunA00250; Mon, 16 Jul 2001 13:56:50 -0700 (PDT) Mime-Version: 1.0 X-Sender: tiffany@mail.usenix.org Message-Id: Date: Mon, 16 Jul 2001 13:58:40 -0700 To: announce@FreeBSD.org, announce@NetBSD.org, announce@OpenBSD.org From: Tiffany Peoples Subject: BSDCon 2002 - Call for Papers Content-Type: text/plain; charset="us-ascii" ; format="flowed" Sender: owner-freebsd-announce@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.org BSDCon 2002 February 11-14, 2002 Cathedral Hill Hotel San Francisco, CA. USA http://www.usenix.org/events/bsdcon02/ The premier conference for the BSD community! The Berkeley Software Distributions (BSDs) represent one of the oldest and most vigorous streams of Open Source Development. Together, OpenBSD, FreeBSD, NetBSD, Darwin, and BSD/OS represent millions of servers and desktops. The BSDs have long been part of the backbones of the Internet, in everything from embedded applications to large server installations, and will soon be widely deployed on consumer desktops. If you want to develop cutting-edge network applications, then BSDCon is the place to be. Meet all the movers and shakers of the BSD community, and learn how you can use BSD as part of your enterprise-grade solutions. This is the third BSDCon, but the first to be sponsored by the USENIX Association. Two days of tutorials will precede two days of technical sessions and a vendor exhibit. The combination of technical tracks, invited talks, tutorials, Birds-of-a-Feather sessions, and Work-in-Progress reports provides an opportunity for people of all experience levels to learn from BSD experts, professionals with real world experience, and industry leaders. The BSDCon 2002 Program Committee invites you to contribute your ideas, proposals and papers for the invited talks program, refereed papers track, and Work-in-Progress Reports related to BSD-derived systems and the Open Source world. Suggested topics and guidelines are now available at: http://www.usenix.org/events/bsdcon02/cfp/ Submissions are due August 27, 2001. We look forward to seeing you in San Francisco in February 2002! Sincerely, Sam Leffler, Program Chair ===================================================================== The 2002 BSDCon Conference is sponsored by USENIX, the Advanced Computing Systems Association. www.usenix.org ===================================================================== This is the moderated mailing list freebsd-announce. The list contains announcements of new FreeBSD capabilities, important events and project milestones. See also the FreeBSD Web pages at http://www.freebsd.org To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-announce" in the body of the message From owner-freebsd-announce Tue Jul 17 10:49:25 2001 Delivered-To: freebsd-announce@freebsd.org Received: from freefall.freebsd.org (freefall.freebsd.org [216.136.204.21]) by hub.freebsd.org (Postfix) with ESMTP id 5285B37B406; Tue, 17 Jul 2001 10:49:13 -0700 (PDT) (envelope-from security-advisories@FreeBSD.org) Received: (from kris@localhost) by freefall.freebsd.org (8.11.4/8.11.4) id f6HHnDa52518; Tue, 17 Jul 2001 10:49:13 -0700 (PDT) (envelope-from security-advisories@FreeBSD.org) Date: Tue, 17 Jul 2001 10:49:13 -0700 (PDT) Message-Id: <200107171749.f6HHnDa52518@freefall.freebsd.org> X-Authentication-Warning: freefall.freebsd.org: kris set sender to security-advisories@FreeBSD.org using -f From: FreeBSD Security Advisories To: FreeBSD Security Advisories Subject: FreeBSD Security Advisory FreeBSD-SA-01:48.tcpdump Reply-To: security-advisories@FreeBSD.org Sender: owner-freebsd-announce@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.org -----BEGIN PGP SIGNED MESSAGE----- ============================================================================= FreeBSD-SA-01:48 Security Advisory FreeBSD, Inc. Topic: tcpdump contains remote buffer overflow Category: core Module: tcpdump Announced: 2001-07-17 Credits: Nick Cleaton Affects: All releases of FreeBSD 4.x prior to 4.4, FreeBSD 4.3-STABLE prior to the correction date FreeBSD 3.x is unaffected. Corrected: 2001-07-09 Vendor status: Patch released FreeBSD only: NO I. Background tcpdump is a tool for monitoring network traffic activity. II. Problem Description An overflowable buffer was found in the version of tcpdump included with FreeBSD 4.x. Due to incorrect string length handling in the decoding of AFS RPC packets, a remote user may be able to overflow a buffer causing the local tcpdump process to crash. In addition, it may be possible to execute arbitrary code with the privileges of the user running tcpdump, often root. The effects of this vulnerability are similiar to those described in advisory FreeBSD-SA-00:61.tcpdump.v1.1. All released versions of FreeBSD prior to the correction date including 4.3-RELEASE are vulnerable to this problem, however it does not affect the FreeBSD 3.x branch which includes an older version of tcpdump. III. Impact Remote users can cause the local tcpdump process to crash, and may be able to cause arbitrary code to be executed as the user running tcpdump, often root. IV. Workaround Do not use vulnerable versions of tcpdump in network environments which may contain packets from untrusted sources. V. Solution One of the following: 1) Upgrade your vulnerable FreeBSD system to 4.3-STABLE or the RELENG_4_3 security branch after the respective correction dates. 2) FreeBSD 4.x systems prior to the correction date: Download the patch and the detached PGP signature from the following locations, and verify the signature using your PGP utility. ftp://ftp.freebsd.org/pub/FreeBSD/CERT/patches/SA-01:48/tcpdump-4.x.patch ftp://ftp.freebsd.org/pub/FreeBSD/CERT/patches/SA-01:48/tcpdump-4.x.patch.asc # cd /usr/src/contrib/tcpdump # patch -p < /path/to/patch # cd /usr/src/usr.sbin/tcpdump # make depend && make all install 3) FreeBSD 4.3-RELEASE systems: An experimental upgrade package is available for users who wish to provide testing and feedback on the binary upgrade process. This package may be installed on FreeBSD 4.3-RELEASE systems only, and is intended for use on systems for which source patching is not practical or convenient. If you use the upgrade package, feedback (positive or negative) is requested to security-officer@FreeBSD.org so we can improve the process for future advisories. During the installation procedure, backup copies are made of the files which are replaced by the package. These backup copies will be reinstalled if the package is removed, reverting the system to a pre-patched state. Two versions of the upgrade package are available, depending on whether or not the system has openssl installed. To verify whether your system has openssl installed, perform the following command: # ls /usr/bin/openssl Possible responses: /usr/bin/openssl # This response indicates you have openssl present ls: /usr/bin/openssl: No such file or directory # This reponse indicates you do not have # openssl present 3a) If OpenSSL is not present # fetch ftp://ftp.FreeBSD.org/pub/FreeBSD/CERT/packages/SA-01:48/security-patch-tcpdump-nossl-01.48.tgz # fetch ftp://ftp.FreeBSD.org/pub/FreeBSD/CERT/packages/SA-01:48/security-patch-tcpdump-nossl-01.48.tgz.asc Verify the detached PGP signature using your PGP utility. # pkg_add security-patch-tcpdump-nossl-01.48.tgz 3b) If OpenSSL is present # fetch ftp://ftp.FreeBSD.org/pub/FreeBSD/CERT/packages/SA-01:48/security-patch-tcpdump-ssl-01.48.tgz # fetch ftp://ftp.FreeBSD.org/pub/FreeBSD/CERT/packages/SA-01:48/security-patch-tcpdump-ssl-01.48.tgz.asc Verify the detached PGP signature using your PGP utility. # pkg_add security-patch-tcpdump-ssl-01.48.tgz -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.0.6 (FreeBSD) Comment: For info see http://www.gnupg.org iQCVAwUBO1R5i1UuHi5z0oilAQFdCQQAhFUzYA7plZN1O0rK/iU/jPaoCqM0KDPP Vdg+3zP8I5Vovdbxdns1DVefI3PVhZbLwh8E0ZnEz544FB5atiYsRiqQxuoEMZiN 1JSRHUOIYyAChtIUZY1JV9eF8GfemWaAcgNp7mNWYKl7dUn0nYERfTO92YNm+l7M 3nNvOwkhqLU= =PrXC -----END PGP SIGNATURE----- This is the moderated mailing list freebsd-announce. The list contains announcements of new FreeBSD capabilities, important events and project milestones. See also the FreeBSD Web pages at http://www.freebsd.org To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-announce" in the body of the message