Messages of the Day

Subject: Notice to users running Unix at home
Date: Mon, Aug 19 2002 -- 3:40 PM
Posted by: Mara's Staff Account

Panix customers who run home versions of Unix should pay close attention
to these recent security advisories:

OpenSSH remote root compromise:
http://www.openssh.org/txt/iss.adv

BSD-based operating system resolver client buffer overflow:
http://www.kb.cert.org/vuls/id/803539

Apache chunking remote vulnerability:
http://httpd.apache.org/info/security_bulletin_20020620.txt

The resolver client buffer overflow is particularly scary, since it
could theoretically be exploited through a firewall or on a machine
that is not running any server programs.

We recommend that all users who run Unix at home pay close attention
to these advisories and upgrade their software appropriately as soon
as possible.