From owner-freebsd-bugs  Tue Jan 25 12:30: 5 2000
Delivered-To: freebsd-bugs@freebsd.org
Received: from freefall.freebsd.org (freefall.FreeBSD.ORG [204.216.27.21])
	by hub.freebsd.org (Postfix) with ESMTP id D37AD14EB4
	for <freebsd-bugs@FreeBSD.org>; Tue, 25 Jan 2000 12:30:02 -0800 (PST)
	(envelope-from gnats@FreeBSD.org)
Received: (from gnats@localhost)
	by freefall.freebsd.org (8.9.3/8.9.2) id MAA94555;
	Tue, 25 Jan 2000 12:30:02 -0800 (PST)
	(envelope-from gnats@FreeBSD.org)
Received: from khavrinen.lcs.mit.edu (khavrinen.lcs.mit.edu [18.24.4.193])
	by hub.freebsd.org (Postfix) with ESMTP id 2542614D12
	for <FreeBSD-gnats-submit@freebsd.org>; Tue, 25 Jan 2000 12:21:21 -0800 (PST)
	(envelope-from wollman@khavrinen.lcs.mit.edu)
Received: (from wollman@localhost)
	by khavrinen.lcs.mit.edu (8.9.3/8.9.3) id PAA07201;
	Tue, 25 Jan 2000 15:21:19 -0500 (EST)
	(envelope-from wollman)
Message-Id: <200001252021.PAA07201@khavrinen.lcs.mit.edu>
Date: Tue, 25 Jan 2000 15:21:19 -0500 (EST)
From: Garrett Wollman <wollman@khavrinen.lcs.mit.edu>
Reply-To: wollman@khavrinen.lcs.mit.edu
To: FreeBSD-gnats-submit@freebsd.org
X-Send-Pr-Version: 3.2
Subject: bin/16353: rlogin encryption is broken on transmit side
Sender: owner-freebsd-bugs@FreeBSD.ORG
Precedence: bulk
X-Loop: FreeBSD.org


>Number:         16353
>Category:       bin
>Synopsis:       rlogin encryption is broken on transmit side
>Confidential:   no
>Severity:       serious
>Priority:       high
>Responsible:    freebsd-bugs
>State:          open
>Quarter:        
>Keywords:       
>Date-Required:
>Class:          sw-bug
>Submitter-Id:   current-users
>Arrival-Date:   Tue Jan 25 12:30:01 PST 2000
>Closed-Date:
>Last-Modified:
>Originator:     Garrett Wollman
>Release:        FreeBSD 4.0-CURRENT i386
>Organization:
MIT Laboratory for Computer Science
>Environment:

	-current as of Sunday, January 23


>Description:

	rlogin -x does not correctly encrypt its output.  Decryption
	works fine.

>How-To-Repeat:

	rlogin -x somehost
	# where somehost runs MIT or FreeBSD-3.x v4 or MIT v5 rlogind
	read motd
	press keys, watch garbage accumulate at shell prompt

>Fix:

	$ rcp somehost:/usr/bin/rlogin .
	# install -o root -g wheel rlogin /usr/bin



>Release-Note:
>Audit-Trail:
>Unformatted:


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-bugs" in the body of the message