“When a service using KTH Kerberos 4 recieves a response from a Kerberos server during the authentication process, it performs a memory copy of data contained within the packet to a buffer of predefined size on the process’ stack. It may be possible for an attacker to exploit this and gain root access on the host running the Kerberos-enabled service in the traditional buffer overflow manner.” Full details at SecurityFocus.com.

eWEEK reports that Sun is ready to roll with two new versions of its Java programming tools: “Forte for Java 2.0 will be available in two editions; the entry-level Community Edition, which is designed for client-side development, and the Internet Edition, which is positioned for server-side development. Both editions are based on the open-source IDE (integrated development environment) framework called NetBeans, which provides a modular architecture and the ability to plug in third-party tools.”

“Despite breathless promotion (‘the connectivity of your desktop when you are on the go’), WAP phones are not catching on. Overall, the mobile-phone business is exuberant. About 420 million handsets will be sold worldwide in 2000, according to a forecast by Dataquest Inc. But it’s unlikely that WAP phones will amount to even one in 10 of those.” Full story at MSNBC.

“OSFAQ.com has put together a AtheOS distribution on CD-ROM. If you don’t know what AtheOS is, it is a high performance multithreaded graphical operating system for the PC desktop platform. It supports TCP/IP, SMP, and features a 64-bit journaling file-system. Please check it out. AtheOS CD-ROM”
-Anonymous Reader

The Register reports: “Graphics behemoth Nvidia warns in its quarterly SEC form 10Q filing that it has been advised by Rambus it may be in breach of patents.”

From a gnome-announce post at LWN.net: “On behalf of freedesktop.org, the GNOME Project, and the KDE Project, I’m happy to announce that version 1.0 of the freedesktop.org extended window manager hints specification (EWMHS) is now available. This document specifies extensions to the Inter-Client Communication Conventions Manual (ICCCM) which allow desktop environments to implement features such as pagers, task lists, or full-color icons via communication with the window manager.”

From a press release at NewsAlert: “ACCESS Co., Ltd. introduced a NetFront 2.6 Linux Software Development Kit (SDK) for the worldwide market that speeds the integration of ACCESS’ popular NetFront browser into Linux-based Internet appliances and other non-PC applications. This is the first development kit for a proven embedded browser available for the Linux operating system platform.”

Signal Ground’s Ken Treis takes a look at Eazel’s Nautilus file manager included with the latest Debian distribution.

From LinuxGram: “In another one of those awkward little moments that we have come to expect from Intel, the chip giant has confirmed that only Red Hat and TurboLinux can be installed on Pentium 4 boxes. The rest of the Linux herd won’t run on the hardware.” Slashdot readers discuss the story.

OpenBSD’s Theo de Raadt responds to Slashdot readers’ questions.