From owner-freebsd-www Tue Jul 24 10:12:45 2001 Delivered-To: freebsd-www@freebsd.org Received: from magnesium.net (toxic.magnesium.net [207.154.84.15]) by hub.freebsd.org (Postfix) with SMTP id C889837B405 for ; Tue, 24 Jul 2001 10:12:41 -0700 (PDT) (envelope-from unfurl@magnesium.net) Received: (qmail 56528 invoked by uid 1001); 24 Jul 2001 17:12:41 -0000 Date: 24 Jul 2001 10:12:41 -0700 Date: Tue, 24 Jul 2001 10:12:41 -0700 From: Bill Swingle To: Kris Kennaway Cc: www@FreeBSD.org, security-officer@FReeBSD.org Subject: Re: telnetd exploit and freebsd website Message-ID: <20010724101241.A55608@dub.net> References: <20010723182246.A69710@xor.obsecurity.org> Mime-Version: 1.0 Content-Type: multipart/signed; micalg=pgp-md5; protocol="application/pgp-signature"; boundary="VbJkn9YxBvnuCH5J" Content-Disposition: inline User-Agent: Mutt/1.2.5i In-Reply-To: <20010723182246.A69710@xor.obsecurity.org>; from kris@obsecurity.org on Mon, Jul 23, 2001 at 06:22:47PM -0700 X-Operating-System: FreeBSD toxic.magnesium.net 4.3-STABLE FreeBSD 4.3-STABLE Sender: owner-freebsd-www@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.org --VbJkn9YxBvnuCH5J Content-Type: text/plain; charset=us-ascii Content-Disposition: inline Content-Transfer-Encoding: quoted-printable As of 10:12 PST this still hasn't been taken care of. Can someone from the www@ list please respond?=20 -Bill On Mon, Jul 23, 2001 at 06:22:47PM -0700, Kris Kennaway wrote: > Can someone please add a prominent notice to the top of the website > publicizing the remote root exploit in telnetd? We need to publicize > this as much as possible since it's a root hole in the default > installation. >=20 > Kris --=20 -=3D| Bill Swingle - -=3D| Every message PGP signed -=3D| Fingerprint: C1E3 49D1 EFC9 3EE0 EA6E 6414 5200 1C95 8E09 0223 -=3D| Different all twisty a of in maze are you, passages little --VbJkn9YxBvnuCH5J Content-Type: application/pgp-signature Content-Disposition: inline -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.0.6 (FreeBSD) Comment: For info see http://www.gnupg.org iD8DBQE7XayJUgAclY4JAiMRAmKcAKDG9P+I/IfhcoZrjT91C4bczwYLdQCdETIA s3GNv9NnBoC/buRI/ta3gZY= =1AFR -----END PGP SIGNATURE----- --VbJkn9YxBvnuCH5J-- To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-www" in the body of the message