1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
|
Red Hat Reseller News Flash
Date: Mon, 28 Sep 1998 09:30:03 -0700 (PDT)
It has recently come to the attention of Red Hat Software that there
are significant security holes in CDE. All users are affected, both those
who purchased CDE Client and those who purchased CDE Developer that runs on
Red Hat Linux 4.0 up to 5.1.
Description of the problem: Several exploits have been found that allow
any user on your network to gain full access to your CDE session. There
are also bugs that allow local users to that machine to gain root access.
This allows anyone that accesses your machine to change files, delete
files, and commit other malicious actions. Because CDE is not Open
Source software, we have no ability to fix either the minor bugs that have
been reported over the last year, or these more important security bugs.
Red Hat Software will no longer distribute CDE effective immediately, but
will continue to support the copies of CDE that have been purchased
up to this point.
If you currently have stock of CDE, please return it to your distributor, or
to Red Hat if you purchased directly from us.
If your customers wish to return CDE, please tell them to send their CDE
CD-ROM to:
CDE Returns
Red Hat Software
P.O. Box 13588 (for U.S. mail returns)
79 T.W. Alexander Dr.
Bldg 4201, Suite 100
Research Triangle Park, NC 27709
Red Hat will provide consumers with a $50 credit towards future purchases upon
receipt of the CD-ROM.
If you have any questions, please contact Chris Gillespie, chris@redhat.com or
Terry Tomlinson, terry@redhat.com
|
