EnGarde Secure Linux Security Advisory: openssh

| EnGarde Secure Linux Security Advisory                  March 07, 2002 |
| http://www.engardelinux.org/                          ESA-20020307-007 |
|                                                                        |
| Packages: openssh, openssh-clients, openssh-server                     |
| Summary:  Local vulnerability in OpenSSH's channel code.               |

  EnGarde Secure Linux is a secure distribution of Linux that features
  improved access control, host and network intrusion detection, Web
  based secure remote management, complete e-commerce using AllCommerce,
  and integrated open source security tools.

- --------
  There is a local vulnerability in the OpenSSH channel code which may
  allow a local, authenticated user to exploit the server.

- ------
  Joost Pol <joost@pine.nl> outlined this bug in Pine Internet Security
  Advisory PINE-CERT-20020301:


    "Users with an existing user account can abuse this bug to
     gain root privileges. Exploitability without an existing
     user account has not been proven but is not considered
     impossible. A malicious ssh server could also use this bug
     to exploit a connecting vulnerable client."

  The Common Vulnerabilities and Exposures project (cve.mitre.org/) has
  assigned the name CAN-2002-0083 to this issue.


- --------
  All users should upgrade to the most recent version as outlined in
  this advisory.

  Guardian Digital recently made available the Guardian Digital Secure
  Network, a means to proactively keep systems secure and manage 
  system software. EnGarde users can automatically update their system
  using the Guardian Digital WebTool secure interface.

  If choosing to manually upgrade this package, updates can be
  obtained from:


  Before upgrading the package, the machine must either:

    a) be booted into a "standard" kernel; or
    b) have LIDS disabled.

  To disable LIDS, execute the command:

    # /sbin/lidsadm -S -- -LIDS_GLOBAL

  To install the updated package, execute the command:

    # rpm -Uvh <filename>

  You must now update the LIDS configuration by executing the command:

    # /usr/sbin/config_lids.pl

  To re-enable LIDS (if it was disabled), execute the command:

    # /sbin/lidsadm -S -- +LIDS_GLOBAL

  To verify the signatures of the updated packages, execute the command:

    # rpm -Kv <filename>

- ----------------
  These updated packages are only for EnGarde Secure Linux Community

  Source Packages:

      MD5 Sum: 675ca26dd4cf1bddb3363b65433a8833

  i386 Binary Packages:

      MD5 Sum: 8564be9e0d904b29bbea0ce743e14f51

      MD5 Sum: a42d161a88ad830abec45a13b2ee710c

      MD5 Sum: 77cf681f7b0e530d98ab784edec3a76f

  i686 Binary Packages:

      MD5 Sum: a703f0046b35d7d08ee3a6354dde25ea

      MD5 Sum: e0e8de4271d26f36c75b28c727906bb4

      MD5 Sum: 96d91d85f116934737bd3e1419bd90c0

- ----------
  Guardian Digital's public key:

  Credit for the discovery of this bug goes to:
    Joost Pol <joost@pine.nl>

  OpenSSH's Official Web Site:

  Security Contact:    security@guardiandigital.com
  EnGarde Advisories:  http://www.engardelinux.org/advisories.html

- --------------------------------------------------------------------------
$Id: ESA-20020307-007-openssh,v 1.2 2002/03/07 16:27:48 rwm Exp $
- --------------------------------------------------------------------------
Author: Ryan W. Maple, <ryan@guardiandigital.com> 
Copyright 2002, Guardian Digital, Inc.

                        This message is digitally signed. Click the lock icon for more information.

     To unsubscribe email engarde-security-request@engardelinux.org
         with "unsubscribe" in the subject of the message.

Copyright(c) 2001 Guardian Digital, Inc.                EnGardeLinux.org

Get the Free Newsletter!

Subscribe to Developer Insider for top news, trends, & analysis