From owner-freebsd-security Mon Jul 23 12:55:58 2001 Delivered-To: freebsd-security@freebsd.org Received: from intense.net (server.intense.net [199.217.236.1]) by hub.freebsd.org (Postfix) with ESMTP id 11A3537B401 for ; Mon, 23 Jul 2001 12:55:53 -0700 (PDT) (envelope-from bobber@intense.net) Received: from bob ([209.248.134.245]) by intense.net (8.8.8/8.8.8) with SMTP id OAA48831 for ; Mon, 23 Jul 2001 14:55:51 -0500 (CDT) Message-ID: <03af01c113b1$1d6b6080$6c01a8c0@mpcsecurity.com> From: "Robert Herrold" To: Subject: telnet exploit Date: Mon, 23 Jul 2001 14:52:46 -0500 MIME-Version: 1.0 Content-Type: multipart/alternative; boundary="----=_NextPart_000_03AA_01C11387.22A47340" X-Priority: 3 X-MSMail-Priority: Normal X-Mailer: Microsoft Outlook Express 5.50.4522.1200 X-MIMEOLE: Produced By Microsoft MimeOLE V5.50.4522.1200 Sender: owner-freebsd-security@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.org This is a multi-part message in MIME format. ------=_NextPart_000_03AA_01C11387.22A47340 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable I have never used cvsup before, and I'm a little confused about the = current possible patch/fix.=20 First off, is there a 'patch/fix/replacement for telnetd' = (/usr/libexec/telnetd). If so, would that be included in the cvsup?=20 Secondly, I've read through the cvsup documentation, and I'm a little = unclear on whether it is basically just downloading source, or is it = adding the packages. (do I need to recompile?) Any help would be greatly appreciated. Bob Herrold Senior Network Engineer Metropark Communications=20 10405 A Baur Blvd St Louis MO 63132 (314)439-1900 ------=_NextPart_000_03AA_01C11387.22A47340 Content-Type: text/html; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable

I have never used cvsup before, and I'm = a little=20 confused about the current possible patch/fix.

First off, is there a = 'patch/fix/replacement for=20 telnetd' (/usr/libexec/telnetd). If so, would that be included in the = cvsup?=20

Secondly, I've read through the cvsup=20 documentation, and I'm a little unclear on whether it is basically just=20 downloading source, or is it adding the packages. (do I need to=20 recompile?)

Any help would be greatly = appreciated.

Bob Herrold
Senior Network = Engineer
Metropark=20 Communications
10405 A Baur Blvd
St Louis MO=20 63132
(314)439-1900

------=_NextPart_000_03AA_01C11387.22A47340-- To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message