From owner-doc-jp@jp.freebsd.org  Wed Jul 12 00:40:20 2000
Received: (from daemon@localhost)
	by castle.jp.freebsd.org (8.9.3+3.2W/8.7.3) id AAA17604;
	Wed, 12 Jul 2000 00:40:20 +0900 (JST)
	(envelope-from owner-doc-jp@jp.FreeBSD.org)
Received: from smtp03.246.ne.jp (smtp03.246.ne.jp [210.253.192.37])
	by castle.jp.freebsd.org (8.9.3+3.2W/8.7.3) with SMTP id AAA17599
	for <doc-jp@jp.freebsd.org>; Wed, 12 Jul 2000 00:40:20 +0900 (JST)
	(envelope-from y-koga@jp.FreeBSD.org)
Received: (qmail 17235 invoked by alias); 12 Jul 2000 00:40:10 +0900
Message-ID: <20000711154010.17234.qmail@smtp.246.ne.jp>
Received: (qmail 17224 invoked from network); 12 Jul 2000 00:40:09 +0900
Received: from tp4hrb098.246.ne.jp (HELO localhost) (210.253.197.98)
  by smtp.246.ne.jp with SMTP; 12 Jul 2000 00:40:09 +0900
To: doc-jp@jp.freebsd.org
In-Reply-To: <20000705230822.B2E6837BAD9@hub.freebsd.org>
References: <20000705230822.B2E6837BAD9@hub.freebsd.org>
X-Mailer: Mew version 1.94.2 on Emacs 19.28 / Mule 2.3 (SUETSUMUHANA)
Mime-Version: 1.0
Content-Type: Text/Plain; charset=iso-2022-jp
Content-Transfer-Encoding: 7bit
Date: Wed, 12 Jul 2000 00:40:06 +0900
From: Koga Youichirou <y-koga@jp.freebsd.org>
X-Dispatcher: imput version 20000228(IM140)
Reply-To: doc-jp@jp.freebsd.org
Precedence: list
X-Distribute: distribute version 2.1 (Alpha) patchlevel 24e+000315
X-Sequence: doc-jp 7527
Subject: [doc-jp 7527] Re: ANNOUNCE: FreeBSD Ports Security Advisory:
 FreeBSD-SA-00:28.majordomo
Errors-To: owner-doc-jp@jp.freebsd.org
Sender: owner-doc-jp@jp.freebsd.org
X-Originator: y-koga@jp.freebsd.org

$B$3$l$O!"(Bwarning $B$N$_$G$$$^$$$A2r7h$K$J$C$F$$$J$$$h$J$!!#(B

BEGIN------------------- $B$3$3$+$i(B ------------------------
 $B$3$N%a!<%k$O(B, announce-jp $B$KN.$l$?(B

  Subject: ANNOUNCE: FreeBSD Ports Security Advisory: FreeBSD-SA-00:28.majordomo
  From: FreeBSD Security Advisories <security-advisories@freebsd.org>
  Date: Wed,  5 Jul 2000 16:08:22 -0700 (PDT)
  Message-Id: <20000705230822.B2E6837BAD9@hub.freebsd.org>
  X-Sequence: announce-jp 468

 $B$rF|K\8lLu$7$?$b$N$G$9(B. 

 $B86J8$O(B PGP $B=pL>$5$l$F$$$^$9$,(B, $B$3$NF|K\8lLu$O(B PGP $B=pL>$5$l$F$$$^$;$s(B. 
 $B%Q%C%AEy$NFbMF$,2~cb$5$l$F$$$J$$$3$H$r3NG'$9$k$?$a$K(B PGP $B$N%A%'%C%/$r(B
 $B9T$J$&$K$O(B, $B86J8$r;2>H$7$F$/$@$5$$(B. 

 $BF|K\8lLu$O(B FreeBSD $BF|K\8l%I%-%e%a%s%F!<%7%g%s%W%m%8%'%/%H(B(doc-jp)$B$,;29M$N(B
 $B$?$a$KDs6!$9$k$b$N$G(B, doc-jp $B$O(B $B$=$NFbMF$K$D$$$F$$$+$J$kJ]>Z$b$$$?$7$^$;$s(B.
 $BF|K\8lLu$K$D$$$F$N$*Ld$$9g$o$;$O(B doc-jp@jp.FreeBSD.org $B$^$G$*4j$$$7$^$9(B.

--($B$3$3$+$i(B)
=============================================================================
FreeBSD-SA-00:28                                           Security Advisory
                                                                FreeBSD, Inc.

$B%H%T%C%/(B:	majordomo is not safe to run on multi-user machines

$BJ,N`(B:		ports
$B%b%8%e!<%k(B:	majordomo
$B9pCNF|(B:		2000-07-05
$B1F6AHO0O(B:	Ports collection
$B=$@5F|(B:		See below
$B%Y%s%@$N%9%F!<%?%9(B:	$BLdBj$K$D$$$FJ8=q2=$7$F$$$k(B
FreeBSD $B$K8GM-$+(B:	NO

I.   $BGX7J(B - Background

Majordomo is a popular mailing-list manager.

majordomo $B$O(B, $B?M5$$N$"$k%a!<%j%s%0%j%9%H4IM}%7%9%F%`$G$9(B. 

II.  $BLdBj$N>\:Y(B - Problem Description

Majordomo contains a number of perl scripts which are executed by a
setuid wrapper for providing mailing-list management
functionality. However there are numerous weaknesses in these scripts
which allow unprivileged users to run arbitrary commands as the
majordomo user, as well as obtaining read and write access to the
mailing list data.

majordomo $B$K$OJ#?t$N(B Perl $B%9%/%j%W%H$,4^$^$l$F$$$^$9(B. $B$=$N%9%/%j%W%H72(B
$B$O(B, $B%a!<%j%s%0%j%9%H$N4IM}5!G=$rDs6!$9$k$?$a$K(B, setuid $B$5$l$?(B wrapper 
$B%W%m%0%i%`$+$i<B9T$5$l$^$9(B. $B$7$+$7(B, $B$3$l$i$N%9%/%j%W%H$K$O(B, $BHsFC8"%f!<(B
$B%6$,(B majordomo $B$N%f!<%68"8B$GG$0U$N%3%^%s%I$r<B9T$G$-$F$7$^$&B?$/$N<e(B
$BE@$,$"$j$^$9(B. $B$3$l$O%a!<%j%s%0%j%9%H$N%G!<%?$rFI$_=q$-$G$-$F$7$^$&$H$$(B
$B$&$3$H$G$9(B. 

The majordomo port is not installed by default, nor is it "part of
FreeBSD" as such: it is part of the FreeBSD ports collection, which
contains over 3400 third-party applications in a ready-to-install
format.

majordomo $B$N(B port $B$O%G%U%)%k%H$G%$%s%9%H!<%k$5$l$k$b$N$G$O$J$/(B,
FreeBSD $B%7%9%F%`$N0lIt$r9=@.$9$k$b$N$G$b$"$j$^$;$s(B. $B$=$l$i$O(B, 3400 $B$r(B
$BD6$($k%5!<%I%Q!<%F%#@=$N%"%W%j%1!<%7%g%s$,$9$0$K%$%s%9%H!<%k$G$-$k7A$G(B
$B<}$a$i$l$F$$$k(B FreeBSD Ports Collection $B$N0lIt$G$9(B. 

FreeBSD makes no claim about the security of these third-party
applications, although an effort is underway to provide a security
audit of the most security-critical ports.

FreeBSD $B$G$O(B, $B$3$N$h$&$J%5!<%I%Q!<%F%#@=%"%W%j%1!<%7%g%s$N%;%-%e%j%F%#(B
$BLdBj$KBP$7$F(B, $BFC$K2?$+$r<gD%$9$k$3$H$O$"$j$^$;$s(B ($BLuCm(B: Ports
Collection $B$KF~$C$F$$$k$+$i$H$$$C$F(B, FreeBSD $B$N3+H/<T$?$A$,$=$N%"%W%j(B
$B%1!<%7%g%s$,0BA4$G$"$k$HI>2A$7$?$o$1$G$O$"$j$^$;$s(B). $B$?$@$7(B, $B%;%-%e%j(B
$B%F%#LdBj$KBP$7$FBg$-$J1F6A$r;}$D$h$&$J(B ports $B$KBP$9$k%;%-%e%j%F%#4F::(B
$B$rDs6!$9$Y$/(B, $B8=:_EXNOCf$G$9(B. 

III. $B1F6AHO0O(B - Impact

Unprivileged local users can run commands as the 'majordomo' user,
including accessing and modifying mailing-list subscription data.

$B%m!<%+%k$NHsFC8"%f!<%6$,(B majordomo $B$N%f!<%68"8B$G%3%^%s%I$r<B9T2DG=$G(B
$B$9(B. $B$3$l$O(B, $B%a!<%j%s%0%j%9%H$NEPO?%G!<%?$r;2>H!&JQ99$G$-$k$3$H$b4^$_$^(B
$B$9(B. 

If you have not chosen to install the majordomo port/package, then
your system is not vulnerable to this problem.

majordomo $B$N(B port/package $B$r%$%s%9%H!<%k$7$F$$$J$1$l$P(B, $B$=$N%7%9%F%`$K(B
$B$3$NLdBj$K$D$$$F$N%;%-%e%j%F%#>e$N<eE@$O$"$j$^$;$s(B.

IV.  $BBP1~:v(B - Workaround

Deinstall the majordomo port/package, if you you have installed it, or
limit the permissions of the majordomo/ directory and/or its contents
appropriately (see below).

majordomo $B$N(B port/package $B$r%$%s%9%H!<%k$7$F$$$k>l9g(B, $B$=$l$r%"%s%$%s%9(B
$B%H!<%k$9$k(B. $B$"$k$$$O(B, majordomo/ $B%G%#%l%/%H%j$H(B, $B$=$NG[2<$N%U%!%$%k72(B
$B$rE,@Z$J%Q!<%_%7%g%s$K@)8B$9$k(B. 

V.   $B=$@5=hCV(B - Solution

Since the vendor has chosen not to fix the various security holes in
the default installation of majordomo, there is no simple solution. It
may be possible to adequately secure the majordomo installation while
retaining required functionality, by tightening the permissions on the
/usr/local/majordomo directory and/or its contents, but these actions
are not taken by the FreeBSD port and are beyond the scope of this
advisory.

$B3+H/85$O(B, majordomo $B$r%$%s%9%H!<%k$7$?:]$N%G%U%)%k%H$N@_Dj$K4^$^$l$k$5(B
$B$^$6$^$J%;%-%e%j%F%#%[!<%k$r=$@5$7$J$$$3$H$r7hDj$7$F$$$k$N$G(B, $B4JC1$J2r(B
$B7hJ}K!$OB8:_$7$^$;$s(B. /usr/local/majordomo $B%G%#%l%/%H%j$*$h$S$=$NG[2<(B
$B$N%U%!%$%k72$N%Q!<%_%7%g%s$r87$7$/$9$k$3$H$G(B, $BI,MW$J5!G=$r0];}$7$?$^$^(B
$B==J,0BA4$K(B majordomo $B$r%$%s%9%H!<%k$9$k$3$H$O2DG=$@$H;W$$$^$9(B. $B$7$+$7(B, 
FreeBSD $B$N(B majordomo $B$N(B port $B$G$O$=$&$$$&$3$H$O9T$J$$$^$;$s$7(B, $B$3$N4+(B
$B9p$NBP>]HO0O30$G$9(B. 

Instead we recommend that majordomo not be used on a system which
contains untrusted users, or an alternative mailing-list manager be
used. There are several such utilities in the FreeBSD ports
collection.

$BK\4+9p$G$O(B, $B?.Mj$G$-$J$$%f!<%6$,B8:_$9$k%7%9%F%`>e$G$O(B, majordomo $B$N(B
$BBe$o$j$KB>$N%a!<%j%s%0%j%9%H4IM}%7%9%F%`$r;HMQ$9$k$3$H$r?d>)$7$^$9(B. 
FreeBSD $B$N(B Ports Collection $B$K$O$=$N$h$&$J%f!<%F%#%j%F%#$,$$$/$D$+B8:_(B
$B$7$^$9(B. 
END--------------------- $B$3$3$^$G(B ------------------------
----
$B$3$,$h$&$$$A$m$&(B
