Bugtraq mailing list archives

Re: [RHSA-2000:061-02] syslog format vulnerability in klogd


From: Lionel Cons <lionel.cons () CERN CH>
Date: Tue, 19 Sep 2000 10:53:23 +0200

bugzilla () REDHAT COM writes:
Various vulnerabilities exist in syslogd/klogd. [...]

4. Solution:

For each RPM for your particular architecture, run:

rpm -Fvh [filename]

where filename is the name of the RPM.

I have the impression that this is not enough as the old buggy daemons
still run. It seems necessary to run:
        # /etc/rc.d/init.d/syslog restart

(Red Hat, could you add this to the rpm post install script?)

________________________________________________________
Lionel Cons        http://home.cern.ch/~cons
CERN               http://www.cern.ch

Hinds' 1st Law of Computer Programming
        Any given program, when running, is obsolete.


Current thread: