From owner-freebsd-bugs Wed Jul 29 06:47:15 1998 Return-Path: Received: (from majordom@localhost) by hub.freebsd.org (8.8.8/8.8.8) id GAA25677 for freebsd-bugs-outgoing; Wed, 29 Jul 1998 06:47:15 -0700 (PDT) (envelope-from owner-freebsd-bugs@FreeBSD.ORG) Received: from freefall.freebsd.org (freefall.FreeBSD.ORG [204.216.27.21]) by hub.freebsd.org (8.8.8/8.8.8) with ESMTP id GAA25641; Wed, 29 Jul 1998 06:46:54 -0700 (PDT) (envelope-from thepish@FreeBSD.org) From: Peter Hawkins Received: (from thepish@localhost) by freefall.freebsd.org (8.8.8/8.8.5) id GAA02996; Wed, 29 Jul 1998 06:45:30 -0700 (PDT) Date: Wed, 29 Jul 1998 06:45:30 -0700 (PDT) Message-Id: <199807291345.GAA02996@freefall.freebsd.org> To: jonny@mailhost.coppe.ufrj.br, thepish@FreeBSD.ORG, freebsd-bugs@FreeBSD.ORG Subject: Re: bin/4276 Sender: owner-freebsd-bugs@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org Synopsis: Security problem with DNS resolution State-Changed-From-To: open-closed State-Changed-By: thepish State-Changed-When: Wed Jul 29 06:42:38 PDT 1998 State-Changed-Why: Neither telnetd or rlogind produce the reported fault in 2.2.7. Examining their source, both do precisely what submitter suggests ie if gethostbyaddr returns a NULL, the IP address is strncpy-ed into the ut_host field (consistent with the behaviour I see when I try it). Examination of the cvs log (and brief examination of committed versions) around the time of the report did not reveal exactly where the bug was active. I think the window must have been brief. To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-bugs" in the body of the message