“A buffer overflow in ftpd in OpenBSD was reported to the OpenBSD bugs mailing list by Kristian Vlaardingerbroek
on Dec. 4. Apparently, due to the one-byte overrun in the replydirname() function, it is possible to get a remote root
shell. This problem also exists in NetBSD’s ftpd.” Full details at BSD Today.

BSD Today has details of a few vulnerabilities that exist in this version of procfs. Notable: normal users might gain superuser access; create DoS attacks by manipulating processes; initiate buffer overflows with the help of a jail virtual machine.

From Business Wire: “Wind River Systems, Inc. (Nasdaq:WIND), a leading provider of software and services for smart
devices in the Internet age, today announced general availability of the SNiFF+ 4.0 source code analysis environment for advanced source code visualization
and navigation. SNiFF+ 4.0 allows users to analyze and manage multi-language C, C++, Java, Corba IDL and Fortran code in one environment.”

From PR Newswire: ” The latest version of Oracle Internet File System is available now,
free-of-charge, as part of Oracle8i, Release 3 on all major UNIX, Windows and
Linux hardware platforms. Oracle Internet File System supports Microsoft
Windows ’95, Microsoft Windows ’97 and Microsoft 2000 client machines and
enables other clients to connect through HTTP, WebDAV and FTP protocols.”

From The Register: “NEC senior VP Kazuhiko Kobayashi didn’t win himself any friends in the
open source community when he recently claimed that, to all intents and
purposes, Linux hasn’t a hope of catching up with Windows in key
corporate-oriented applications.”

ZDNet UK, posting a CNET News.com item, has more information on Eazel’s recent announcement that its Nautilus environment will soon be available for Solaris.

From PR Newswire: “SteelEye(TM) Technology
Inc., a leading provider of enterprise application reliability solutions,
announced today an extension of its LifeKeeper(R) Next Generation Enterprise
Reliability Platform(TM) into MySQL database environments.”

RPMs are the standard package for Red Hat based systems. Because Red Hat is so popular, it has become a sort of industry standard in package management. However, rpms can be very moody since they don’t automatically handle dependencies for you.

Check it out here–Sensei

Today, Tuesday 19 December 2000 at 1PM (13:00) EST, the WAMU radio program,
“Public Interest”, will do an hour show on the Free Software Movement. Richard M. Stallman will be a guest on this program. The WAMU listening area is Washington, DC, USA. However, the program is
also syndicated through a number of affiliate stations throughout the USA.
The website lists the affiliate stations. -Bradley M. Kuhn

Newsforge reader Dan Sparks sent this in: “Compaq’s free New Technology TestDrive has been updated, you can now try out RedHat 7.0 on an Alpha EV6.7 system and also testdrive Compaq’s Java 2 JDK V1.2.2 beta 004 on RedHat 7.0 on an AlphaServer ES40, they really scream!”