Security flaw hits Windows, Mac, Linux
Posted by aco on 07 August 2002 - 13:53 · 9 comments & 117 views
About the Author
Full name: Unknown
Forum name:
aco
Contact: via forum PM
Submissions: Normal · Headline
Full name: Unknown
Forum name:
acoContact: via forum PM
Submissions: Normal · Headline
Slashdot It!
Submit to reddit
Submit to blinklist
Bookmark on del.icio.us
Add to furl
Share on Facebook
Add to Windows Live
Add to Google
The problem is widespread because it affects some implementations of XDR (external data representation) libraries, used by many applications as a way of sending data from one system process to another, regardless of the system's architecture. CERT warned on Tuesday that systems using the affected code should immediately apply patches or disable the affected services.
A function in Sun's XDR library contains an integer overflow that can lead to buffer overflows, according to CERT security researchers Jeffrey Havrilla and Cory Cohen. These buffer overflows can allow an attacker to crash the system, execute malicious code or steal sensitive information, Havrilla and Cohen said.
The problem also affects the administration system of Kerberos 5, a widely-used authentication tool, which could allow attackers to gain control of Kerberos Key Distribution Center authentication functions. This could allow an attacker to gain false authentication with other services. Kerberos is included in Windows 2000.
...Microsoft said it is still investigating how Windows is affected by the problem. :P
The following are the changes for the new beta:
- added anti-cheat protection
- fixed textures problem in basic.wad
- fixed para round timer not ending round on 0:00
- fixed +Use exploit
- added garandcarbine selection to light inf. in normal dod gameplay
- added thompsongrease gun selection to assault inf. in normal dod
gameplay
- added k43kar selection to light inf. in normal dod gameplay
- took away 1 grenade from axis light inf.
- fixed switching classes while dying sets reinforcements to 0:00
- added K43 normal gameplay sleeve texture in coding
- addedEdited Vgui class menus and pics
- new Bar model tweak