OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
Subject: RE: [suse-security] SuSE: traceroute
From: Martin Leweling (lewelinuni-muenster.de)
Date: Mon Oct 02 2000 - 07:04:17 CDT

Hi,
On our Linux-Versions I cannot reproduce the segfaults you describe.
SuSE 6.1/6.2 should have traceroute 2.9.3 from nkita-99.11.11-0.rpm (or later)
SuSE 6.4: traceroute 6.0 GOLD from nkitb-2000.7.11-0.rpm (or later)
SuSE 7.0: traceroute 6.0 GOLD from nkitb-2000.7.16-4.rpm (or later)

Maybe you didn't apply all available patches?

Regards,
  Martin

On Mon, 02 Oct 2000, bololupa.de wrote:
>This flaw in traceroute (if your version is vulnerable) is tickled like
> this:
>
> traceroute -g 1 -g 1 (I think it didn't need a hostname)
> Segmentation fault
> ...
>The traceroute version we use on several of our boxes running SuSE 6.0 -> 6.2
>(1.4a5) segfaults by issuing the traceroute command line mentioned above. Is
>this (SuSE-)traceroute version really unsusceptible of being exploited with
>some piece of evil code? Why? 

--
Martin Leweling
Institut fuer Planetologie, WWU Muenster
Wilhelm-Klemm-Str. 10, 48149 Muenster, Germany
Tel.: +49-251-83-33557 Fax:  +49-251-83-39083
E-Mail (work): lewelinuni-muenster.de

---------------------------------------------------------------------
To unsubscribe, e-mail: suse-security-unsubscribesuse.com
For additional commands, e-mail: suse-security-helpsuse.com