Skip site navigation (1)Skip section navigation (2)
Date:      Mon, 23 Jul 2001 12:06:50 -0500
From:      "Chuck Rock" <carock@epconline.net>
To:        <security@FreeBSD.ORG>
Subject:   RE: telnetd root exploit
Message-ID:  <004d01c11399$dd3d9850$1805010a@epconline.net>
In-Reply-To: <20010722120932.E56521@osaka.louisville.edu>

next in thread | previous in thread | raw e-mail | index | archive | help
Until an official advisory is released, does that mean there's no official
patch yet?

I'm new to patches, and was looking for them on the FTP site, but they are
all listed by the advisory number...

Chuck

> -----Original Message-----
> From: owner-freebsd-security@FreeBSD.ORG
> [mailto:owner-freebsd-security@FreeBSD.ORG]On Behalf Of Keith Stevenson
> Sent: Sunday, July 22, 2001 11:10 AM
> To: Kris Kennaway
> Cc: security@FreeBSD.ORG
> Subject: Re: telnetd root exploit
>
>
> On Sat, Jul 21, 2001 at 02:53:55PM -0700, Kris Kennaway wrote:
> > On Sat, Jul 21, 2001 at 02:50:05PM -0700, Holtor wrote:
> > > Any idea when the official advisory will be sent?
> > > I don't want to think i'm patched and restart telnetd
> > > only to be rooted by some lame script kiddie. Thanks
> > > much.
> >
> > Probably Monday.
>
> I have a small suggestion for this and future advisories.  Could
> you include
> which file versions are "fixed"?  For example, in addition to stating that
> the problem was resolved on a certain date, also include that the
> fix is in
> foo.c version (mumble).  It would help make certain that I am
> indeed patched.
> (Yes, I do read the commit messages, but I've been known to miss these
> things.)
>
> Regards,
> --Keith Stevenson--
>
> --
> Keith Stevenson
> System Programmer - Data Center Services - University of Louisville
> keith.stevenson@louisville.edu
> GPG key fingerprint =  332D 97F0 6321 F00F 8EE7  2D44 00D8 F384 75BB 89AE
>
> To Unsubscribe: send mail to majordomo@FreeBSD.org
> with "unsubscribe freebsd-security" in the body of the message
>


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?004d01c11399$dd3d9850$1805010a>