From owner-freebsd-security Wed May 5 12:56:20 1999 Delivered-To: freebsd-security@freebsd.org Received: from xylan.com (postal.xylan.com [208.8.0.248]) by hub.freebsd.org (Postfix) with ESMTP id CCA6E14CE3 for ; Wed, 5 May 1999 12:56:08 -0700 (PDT) (envelope-from wes@softweyr.com) Received: from mailhub.xylan.com by xylan.com (8.8.7/SMI-SVR4 (xylan-mgw 2.2 [OUT])) id MAA17622; Wed, 5 May 1999 12:54:56 -0700 (PDT) Received: from omni.xylan.com by mailhub.xylan.com (SMI-8.6/SMI-SVR4 (mailhub 2.1 [HUB])) id MAA18606; Wed, 5 May 1999 12:54:56 -0700 Received: from softweyr.com (dyn5.utah.xylan.com) by omni.xylan.com (4.1/SMI-4.1 (xylan engr [SPOOL])) id AA06321; Wed, 5 May 99 12:54:49 PDT Message-Id: <3730A208.75596C9B@softweyr.com> Date: Wed, 05 May 1999 13:54:48 -0600 From: Wes Peters Organization: Softweyr LLC X-Mailer: Mozilla 4.5 [en] (X11; U; FreeBSD 3.1-RELEASE i386) X-Accept-Language: en Mime-Version: 1.0 To: Brett Glass Cc: Jacob Zehnder , security@FreeBSD.ORG Subject: Re: [Jamie Rishaw ] FreeBSD 3.1 remotereboot exploit References: <4.2.0.37.19990504212515.045d3100@localhost> Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: 7bit Sender: owner-freebsd-security@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org Brett Glass wrote: > > What would be the motivation for FUDding FreeBSD in this way? I would not > panic, but I would also ask for more information and would not dismiss the > report out of hand. The tone of Jordan's message makes him look defensive > rather than cautious and diligent. We just heard from the security-officer that followup emails have been made and that no other reports of exploits have been posted. Being the security officer is not Jordan's job, he was simply informing us that he wouldn't be saying anything about this until more is known. If it were widespread, we'd be hearing from CERT. The fact that no information whatsoever was included in the post points out that the poster had no intention of helping in any way. What his motiviations for this are we cannot tell. -- "Where am I, and what am I doing in this handbasket?" Wes Peters Softweyr LLC http://www.softweyr.com/~softweyr wes@softweyr.com To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message