From owner-freebsd-security  Wed Mar 13 00:48:49 1996
Return-Path: owner-security
Received: (from root@localhost)
          by freefall.freebsd.org (8.7.3/8.7.3) id AAA14816
          for security-outgoing; Wed, 13 Mar 1996 00:48:49 -0800 (PST)
Received: from nervosa.com (root@nervosa.com [192.187.228.86])
          by freefall.freebsd.org (8.7.3/8.7.3) with ESMTP id AAA14809
          for <freebsd-security@FreeBSD.org>; Wed, 13 Mar 1996 00:48:46 -0800 (PST)
Received: from nervosa.com (coredump@onyx.nervosa.com [10.0.0.1]) by nervosa.com (8.7.5/nervosa.com.2) with SMTP id AAA25323; Wed, 13 Mar 1996 00:44:19 -0800 (PST)
Date: Wed, 13 Mar 1996 00:44:16 -0800 (PST)
From: invalid opcode <coredump@nervosa.com>
To: Tom Samplonius <tom@uniserve.com>
cc: Thomas J Balfe <tbalfe@tioga.com>, freebsd-security@FreeBSD.org
Subject: Re: CA-95:14
In-Reply-To: <Pine.BSF.3.91.960312232617.15976B-100000@haven.uniserve.com>
Message-ID: <Pine.BSF.3.91.960313004341.25236A-100000@nervosa.com>
MIME-Version: 1.0
Content-Type: TEXT/PLAIN; charset=US-ASCII
Sender: owner-security@FreeBSD.org
X-Loop: FreeBSD.org
Precedence: bulk

On Tue, 12 Mar 1996, Tom Samplonius wrote:

>   Read more carefully.  The specified problem is in telnetd, not telnet.  
>   I can't speak for 2.1R, but the problem is not in -stable or -current.
> Tom

Sorry, my mistake. It appears that it is still present in -release, but 
i've tried to exploit it here and no luck.

== Chris Layne =============================================================
== coredump@nervosa.com ================ http://www.nervosa.com/~coredump ==