From owner-freebsd-security  Mon Jul 28 14:31:22 1997
Return-Path: <owner-freebsd-security>
Received: (from root@localhost)
          by hub.freebsd.org (8.8.5/8.8.5) id OAA04521
          for security-outgoing; Mon, 28 Jul 1997 14:31:22 -0700 (PDT)
Received: from mexico.brainstorm.eu.org (root@mexico.brainstorm.fr [193.56.58.253])
          by hub.freebsd.org (8.8.5/8.8.5) with ESMTP id OAA04513
          for <security@FreeBSD.ORG>; Mon, 28 Jul 1997 14:31:15 -0700 (PDT)
Received: from brasil.brainstorm.eu.org (brasil.brainstorm.fr [193.56.58.33])
          by mexico.brainstorm.eu.org (8.8.4/8.8.4) with ESMTP
	  id XAA02513 for <security@FreeBSD.ORG>; Mon, 28 Jul 1997 23:31:15 +0200
Received: (from uucp@localhost)
	by brasil.brainstorm.eu.org (8.8.6/brasil-1.2) with UUCP id XAA08619
	for security@FreeBSD.ORG; Mon, 28 Jul 1997 23:30:49 +0200
Received: (from roberto@localhost) by keltia.freenix.fr (8.8.6/keltia-uucp-2.9) id XAA01241;
          Mon, 28 Jul 1997 23:07:58 +0200 (CEST)
Message-ID: <19970728230758.23621@keltia.freenix.fr>
Date: Mon, 28 Jul 1997 23:07:58 +0200
From: Ollivier Robert <roberto@keltia.freenix.fr>
To: security@FreeBSD.ORG
Subject: Re: security hole in FreeBSD
References: <19970728171633.10794@keltia.freenix.fr> <Pine.BSF.3.95.970728124603.3844p-100000@mail.MCESTATE.COM>
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
X-Mailer: Mutt 0.76
In-Reply-To: <Pine.BSF.3.95.970728124603.3844p-100000@mail.MCESTATE.COM>; from Vincent Poy on Mon, Jul 28, 1997 at 12:49:00PM -0700
X-Operating-System: FreeBSD 3.0-CURRENT ctm#3481 AMD-K6 MMX @ 208 MHz
Sender: owner-freebsd-security@FreeBSD.ORG
X-Loop: FreeBSD.org
Precedence: bulk

According to Vincent Poy:
> 	Nope, when I added perl5 yesterday from the ports tree, I deleted
> the perl5.003 and sperl5.003 that was there after it got updated to
> perl5.00401 and sperl5.00401.  Is the /usr/bin/perl vulnerable in any way?

Not if it is CURRENT from later than May. No hole that we know of anyway.

> 	True but netstat wasn't working anymore after we kicked him off
> the first time and rejected all packets from his ip # when he came back
> on.

LSOF is your friend in case you haven't compiled it yet.
-- 
Ollivier ROBERT -=- FreeBSD: There are no limits -=- roberto@keltia.freenix.fr
FreeBSD keltia.freenix.fr 3.0-CURRENT #23: Sun Jul 20 18:10:34 CEST 1997