Submit list for new spells

["M.L." <mlubrano AT sourcemage.org>]

---------- Forwarded Message -----------
From: "SourceForge.net" <noreply AT sourceforge.net>
To: noreply AT sourceforge.net
Sent: Thu, 20 Feb 2003 02:22:03 -0800
Subject: [openwebmail - announce] RE: Security Advisory 20021219

Read and respond to this message at:
https://sourceforge.net/forum/message.php?msg_id=1889800
By: openwebmail

Topic:          Local user can execute perl script with root

Announced:      2003-02-20

Credits:        pokleyzz <pokleyzz.AT.scan-associates.net>

Affects:        all versions prior 1.90 20030220

Corrected:      openwebmail versions after 1.90 20030220

Patches:
http://openwebmail.org/openwebmail/download/cert/patches/SA-03:01/

http://turtle.ee.ncku.edu.tw/openwebmail/download/cert/patches/SA-03:01/

I.   Background

     Openwebmail is a web-bases email system. It contains several Perl CGI

     scripts run under superuser account (suidperl is used).

II.  Problem Description

     A local user may invoke their own perl script when running openwebmail

     script through suidperl. This is a very serious vulnerability and

     should be taken seriously.

III. Impact

     Local user can execute a perl script on the openwebmail server with root

IV.  Workaround

     None.

V.   Solution

     A. upgrade to the latest openwebmail-current.tgz

     B. or apply the patch in

     http://openwebmail.org/openwebmail/download/cert/patches/SA-03:01/

     http://turtle.ee.ncku.edu.tw/openwebmail/download/cert/patches/SA-03:01/

     C. or modify the scripts manually by replacing all the following block

     use vars qw($SCRIPT_DIR);

     if ( $ENV{'SCRIPT_FILENAME'} =~ m!^(.*?)/[\w\d\-\.]+\.pl! || $0 =~
m!^(.*?)/[\w\d\-\.]+\.pl! ) { $SCRIPT_DIR=$1; }
     if (!$SCRIPT_DIR) { print "Content-type: text/html\n\n\ not
set in CGI script!\n"; exit 0; }
     push (@INC, $SCRIPT_DIR, ".");

        with

     use vars qw($SCRIPT_DIR);

     if ( $0 =~ m!^(.*?)/[\w\d\-\.]+\.pl! ) { $SCRIPT_DIR=$1; }

     if (!$SCRIPT_DIR && open(F, '/etc/openwebmail_path.conf')) {

        $_=<F>; close(F); if ( $_=~/^([^\s]*)/) { $SCRIPT_DIR=$1; }

     }

     if (!$SCRIPT_DIR) { print "Content-type: text/html\n\n\SCRIPT_DIR not set
in /etc/openwebmail_path.conf !\n"; exit 0; }
     push (@INC, $SCRIPT_DIR);

______________________________________________________________________

Current openwebmail 1.90 in devel grimoire: affectd by this bug.

Recommended action: apply the patch by hand ASAP.
>From rycee AT home.se  Thu Feb 20 18:28:17 2003
Return-Path: <rycee AT home.se>
Delivered-To: sm-spell-submit AT lists.ibiblio.org
Received: from kirk (histgr138.sn.umu.se [130.239.131.199])
        by happyhouse.metalab.unc.edu (Postfix) with ESMTP id DCA3B2001F
        for <sm-spell-submit AT lists.ibiblio.org>;
        Thu, 20 Feb 2003 18:28:16 -0500 (EST)
Date: Fri, 21 Feb 2003 00:29:23 +0100
To: sm-spell-submit AT lists.ibiblio.org
Message-ID: <20030220232923.GA9359@kirk>
Mail-Followup-To: sm-spell-submit AT lists.ibiblio.org,
        Eric Sandall <eric AT sandall.us>
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
User-Agent: Mutt/1.4i
From: "Robert Helgesson" <rycee AT home.se>
cc: Eric Sandall <eric AT sandall.us>
Subject: [SM-Spell-Submit] Section update: net
X-BeenThere: sm-spell-submit AT lists.ibiblio.org
X-Mailman-Version: 2.1.1
Precedence: list
List-Id: Submit list for new spells <sm-spell-submit.lists.ibiblio.org>
List-Unsubscribe: <http://lists.ibiblio.org/mailman/listinfo/sm-spell-submit>,
        <mailto:sm-spell-submit-request AT lists.ibiblio.org?subject=unsubscribe>
List-Archive: <https://lists.ibiblio.org/sympa/arc/sm-spell-submit>
List-Post: <mailto:sm-spell-submit AT lists.ibiblio.org>
List-Help: <mailto:sympa AT lists.ibiblio.org?subject=HELP>
List-Subscribe: <http://lists.ibiblio.org/mailman/listinfo/sm-spell-submit>,
        <mailto:sm-spell-submit-request AT lists.ibiblio.org?subject=subscribe>
X-List-Received-Date: Thu, 20 Feb 2003 23:28:17 -0000

Robert Helgesson, Grimoire Guru for net:

New versions:
oidentd                 2.0.5
pidentd                 3.0.16

Changed SOURCE_URLs:
none

Removed spells:
none

New spells:
none

Notes:
grinetd, linux-identd, oidentd and pidentd    fixed bug #2560
oidentd, pidentd        added license information
net-tools               partially applied patch from M.L. (bug #2581),
                        init scripts are now handled by sorcery,
                        updated UPDATED,
                        plus some other minor fixes
nc                      added conflict with nedit

-- 
/     Robert Helgesson     |--    rycee AT home.se     --\
\--   ~~~~~~~~~~~~~~~~   --|   http://www.rycee.cx/   /
>From xenith AT ds1.dhbit.ca  Fri Feb 21 05:40:23 2003
Return-Path: <xenith AT ds1.dhbit.ca>
Delivered-To: sm-spell-submit AT lists.ibiblio.org
Received: from ds1.dhbit.ca (unknown [216.187.94.186])
        by happyhouse.metalab.unc.edu (Postfix) with ESMTP id BD2CD20036
        for <sm-spell-submit AT lists.ibiblio.org>;
        Fri, 21 Feb 2003 05:40:22 -0500 (EST)
Received: by ds1.dhbit.ca (Postfix, from userid 10179)
        id 6BBFC2CEA2; Fri, 21 Feb 2003 02:44:10 -0800 (PST)
Date: Fri, 21 Feb 2003 02:44:10 -0800
From: xenith AT xenith.org
To: SM-Spell-Submit <sm-spell-submit AT lists.ibiblio.org>,
        Jeffrey_Schmidt <jschmidt AT fnal.gov>
Message-ID: <20030221104410.GA20270 AT ds1.dhbit.ca>
Mime-Version: 1.0
Content-Type: multipart/mixed; boundary="PEIAKu/WMn1b1Hv9"
Content-Disposition: inline
User-Agent: Mutt/1.4i
Subject: [SM-Spell-Submit] New Spell: i8kutils [section: mobile]
X-BeenThere: sm-spell-submit AT lists.ibiblio.org
X-Mailman-Version: 2.1.1
Precedence: list
List-Id: Submit list for new spells <sm-spell-submit.lists.ibiblio.org>
List-Unsubscribe: <http://lists.ibiblio.org/mailman/listinfo/sm-spell-submit>,
        <mailto:sm-spell-submit-request AT lists.ibiblio.org?subject=unsubscribe>
List-Archive: <https://lists.ibiblio.org/sympa/arc/sm-spell-submit>
List-Post: <mailto:sm-spell-submit AT lists.ibiblio.org>
List-Help: <mailto:sympa AT lists.ibiblio.org?subject=HELP>
List-Subscribe: <http://lists.ibiblio.org/mailman/listinfo/sm-spell-submit>,
        <mailto:sm-spell-submit-request AT lists.ibiblio.org?subject=subscribe>
X-List-Received-Date: Fri, 21 Feb 2003 10:40:23 -0000


--PEIAKu/WMn1b1Hv9
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline

root@vortex:~# gaze what i8kutils
This package contains a kernel driver and user-space programs for accessing
the SMM BIOS of Dell Inspiron and Latitude laptops. The SMM BIOS is used on
many recent laptops to implement APM functionalities and to access custom
hardware, for example the cooling fans and volume buttons.

-- 
Justin Rocha
-Xenith || xenith AT xenith.org || http://xenith.org/
JabberID:  xenith AT dhbit.ca   || AIM:  JustinR98

Source Mage GNU/Linux -> http://www.sourcemage.org/

--PEIAKu/WMn1b1Hv9
Content-Type: application/octet-stream
Content-Disposition: attachment; filename="i8kutils.tar.bz2"
Content-Transfer-Encoding: base64
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==

--PEIAKu/WMn1b1Hv9--
>From heffer AT mailberlin.net  Fri Feb 21 06:27:06 2003
Return-Path: <heffer AT mailberlin.net>
Delivered-To: sm-spell-submit AT lists.ibiblio.org
Received: from mr0.post.berlinweb.de (mr0.post.berlinweb.de [217.9.39.68])
        by happyhouse.metalab.unc.edu (Postfix) with ESMTP id 586AF2008F
        for <sm-spell-submit AT lists.ibiblio.org>;
        Fri, 21 Feb 2003 06:27:05 -0500 (EST)
Received: from mx0.post.berlinweb.de (mx0.post.berlinweb.de [217.9.39.66])
        by mr0.post.berlinweb.de (8.11.6/8.11.6) with ESMTP id h1LBXtU20362;
        Fri, 21 Feb 2003 12:34:01 +0100
Message-Id: <200302211134.h1LBXtU20362 AT mr0.post.berlinweb.de>
Received: from webmail.berlinweb.de ([217.9.39.66])
        by mx0.post.berlinweb.de with SMTP; Fri, 21 Feb 2003 12:28:03 +0100
To: sm-spell-submit AT lists.ibiblio.org
Subject: Fw: [SM-Spell-Submit] Section update: net
From: heffer AT mailberlin.net
X-Originating-IP: 212.202.170.164
X-Mailer: WebMail
Content-Type: text/plain;
        charset="ISO-8859-1"
Date: Fri, 21 Feb 2003 12:28:03 +0100
cc: eric AT sandall.us
X-BeenThere: sm-spell-submit AT lists.ibiblio.org
X-Mailman-Version: 2.1.1
Precedence: list
List-Id: Submit list for new spells <sm-spell-submit.lists.ibiblio.org>
List-Unsubscribe: <http://lists.ibiblio.org/mailman/listinfo/sm-spell-submit>,
        <mailto:sm-spell-submit-request AT lists.ibiblio.org?subject=unsubscribe>
List-Archive: <https://lists.ibiblio.org/sympa/arc/sm-spell-submit>
List-Post: <mailto:sm-spell-submit AT lists.ibiblio.org>
List-Help: <mailto:sympa AT lists.ibiblio.org?subject=HELP>
List-Subscribe: <http://lists.ibiblio.org/mailman/listinfo/sm-spell-submit>,
        <mailto:sm-spell-submit-request AT lists.ibiblio.org?subject=subscribe>
X-List-Received-Date: Fri, 21 Feb 2003 11:27:06 -0000

Christoph Steckelberg, Grimoire Guru for archive:

New versions:
none

Changed SOURCE_URLs:
none

Removed spells:
none

New spells:
arj - 3.10b - GPL implementation of the arj archiving program

Notes:
As I am writing my diploma, I will have internet access very
sporadically. Please be patient for updates to show up in perforce for
archive-section. Hopefully I will be finished doing my studies in June
2003 and then move to a new city. Till then I will try to fix bugs in
my section on a regular basis (two times a month ;-D ).

l8ers,
Christoph