Tiger UNIX security tool - News
posted by jfs, Wed 10 Sep 2008 07:44:18 AM UTC - 0 replies
A new version of Tiger (3.2.3) has been released. This version is mainly a bug fix release that incorporates all the fixes introduced in Debian since the 3.2.2 release.
It also updates Linux' gen_mounts to support many more filesystems and ...
[Read more]
posted by jfs, Mon 27 Aug 2007 07:31:52 PM UTC - 0 replies
Tiger version 3.2.2 now includes the all new 'audit scripts' written by Marc Heuse.
One common problem when auditing the security of 'live' (production) systems is that the administrator doesn't want the auditor to run a complex set of scripts (such as Tiger). This set of scripts can be used for offline audit of different operating systems.
...
[Read more]
posted by jfs, Mon 27 Aug 2007 07:22:59 PM UTC - 0 replies
After a long time the new 3.2.2 release is available. This release is basicly a bug fix release, introducing many of the changes available in CVS (and in the patches introduced in the Debian packages) which have been generated over the past time.
...
[Read more]
posted by jfs, Tue 27 Apr 2004 06:57:49 PM UTC - 0 replies
While we are preparing a new release people might wonder were the old releases are. Well, they are hard to find (at least for me) but they are available at ftp://ftp.gnu.org/savannah/files/tiger/
This download area can be used while I struggle in ...
[Read more]
posted by jfs, Thu 08 Jan 2004 10:51:45 AM UTC - 0 replies
Important Note: Due to a recent compromise of the Savannah project servers ( http://savannah.nongnu.org/forum/forum.php?forum_id=2752) it is recommended that source code or binaries downloaded from there are checked carefully, specially if not ...
[Read more]
posted by jfs, Sat 11 Oct 2003 07:19:14 PM UTC - 0 replies
A new stable release (3.2.1) for the Tiger security tool has been published. This new release includes a number of bug fixes, enhancements and new checks such as: check_ndd (for HPUX and SunOS systems), check_passwspec (for Linux and HPUX) ...
[Read more]
posted by jfs, Sat 30 Aug 2003 03:23:08 PM UTC - 0 replies
There is a new pre-release Tiger 3.2.1 version available on Savannah's download area. The new stable version 3.2.1 will
boast a number of CHANGES with respect to 3.2. In the prerelase (and inthe CVS) you can read the the official changelog. You will see the addition of a number of new checks (such as check_rookit) and better support
...
[Read more]
posted by jfs, Fri 09 May 2003 09:20:05 PM UTC - 0 replies
A new release of Tiger, version 3.2, has recently been published. This release is considered 'stable' (substituting the 2.2.4 version). Tiger 3.2 fixes some security vulnerabilities (a buffer overflow in realpath.c detected by and unsafe use of ...
[Read more]
posted by jfs, Fri 09 May 2003 06:38:01 PM UTC - 0 replies
A security vulnerability has been detected by Steve Grub [1] in the c/realpath.c program which is distributed in all Tiger versions. The realpath function used did not proper limit the input to it which could cause a buffer overflow.
In some ...
[Read more]
posted by jfs, Fri 25 Apr 2003 05:08:24 PM UTC - 0 replies
With the intention of making people more aware that Tiger is now (in the process of being) ressurrected, I have posted an article at slashdot (http://developers.slashdot.org/article.pl?sid=03/04/22/220227&mode=thread&tid=117&tid=172).
It didn't make it to the frontpage and the formatting sucked (I remember doing proper formating) but still, it's worth mentioning.
[Submit News]
[21 news in archive]