From owner-freebsd-security  Thu Mar 28  7: 7:38 2002
Delivered-To: freebsd-security@freebsd.org
Received: from mail.webmonster.de (datasink.webmonster.de [194.162.162.209])
	by hub.freebsd.org (Postfix) with SMTP id C6C5037B400
	for <security@freebsd.org>; Thu, 28 Mar 2002 07:07:28 -0800 (PST)
Received: (qmail 62575 invoked by uid 1000); 28 Mar 2002 15:07:50 -0000
Date: Thu, 28 Mar 2002 16:07:50 +0100
From: "Karsten W. Rohrbach" <karsten@rohrbach.de>
To: Eric Anderson <anderson@centtech.com>
Cc: security@freebsd.org
Subject: Re: Is FreeBSD susceptible to this vulnerability?
Message-ID: <20020328160750.C62125@mail.webmonster.de>
Mail-Followup-To: "Karsten W. Rohrbach" <karsten@rohrbach.de>,
	Eric Anderson <anderson@centtech.com>, security@freebsd.org
References: <E16qbLv-0004xx-00@xi.css.qmw.ac.uk> <3CA330A5.463E4595@centtech.com>
Mime-Version: 1.0
Content-Type: multipart/signed; micalg=pgp-md5;
	protocol="application/pgp-signature"; boundary="5QAgd0e35j3NYeGe"
Content-Disposition: inline
User-Agent: Mutt/1.2.5i
In-Reply-To: <3CA330A5.463E4595@centtech.com>; from anderson@centtech.com on Thu, Mar 28, 2002 at 09:03:01AM -0600
X-Arbitrary-Number-Of-The-Day: 42
X-URL: http://www.webmonster.de/
X-Disclaimer: My opinions do not necessarily represent those of my employer
X-Work-URL: http://www.ngenn.net/
X-Work-Address: nGENn GmbH, Schloss Kransberg, D-61250 Usingen-Kransberg, Germany
X-Work-Phone: +49-6081-682-304
Sender: owner-freebsd-security@FreeBSD.ORG
Precedence: bulk
List-ID: <freebsd-security.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo@FreeBSD.ORG?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo@FreeBSD.ORG?subject=subscribe%20freebsd-security>
List-Unsubscribe: <mailto:majordomo@FreeBSD.ORG?subject=unsubscribe%20freebsd-security>
X-Loop: FreeBSD.org


--5QAgd0e35j3NYeGe
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

Eric Anderson(anderson@centtech.com)@2002.03.28 09:03:01 +0000:
> In /etc/X11/xdm/Xaccess:
>=20
> #*                                      #any host can get a login window
>=20
> So I think the default install is ok..

i think that this is dependent on the "ancientness" of the xfree86
distribution installed.

/k

--=20
> question =3D ( to ) ? be : ! be; // Wm. Shakespeare
KR433/KR11-RIPE -- WebMonster Community Founder -- nGENn GmbH Senior Techie
http://www.webmonster.de/ -- ftp://ftp.webmonster.de/ -- http://www.ngenn.n=
et/
GnuPG 0x2964BF46 2001-03-15 42F9 9FFF 50D4 2F38 DBEE  DF22 3340 4F4E 2964 B=
F46
My mail is GnuPG signed -- Unsigned ones are bogus -- http://www.gnupg.org/
Please do not remove my address from To: and Cc: fields in mailing lists. 1=
0x

--5QAgd0e35j3NYeGe
Content-Type: application/pgp-signature
Content-Disposition: inline

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.0.6 (FreeBSD)
Comment: For info see http://www.gnupg.org

iD8DBQE8ozHGM0BPTilkv0YRAgdwAJ9oJevTyQPqNbUVQI7XFgo5DpFs1ACfWfTx
d51tM39CeIk72O89al9EUXA=
=726+
-----END PGP SIGNATURE-----

--5QAgd0e35j3NYeGe--

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message