From owner-freebsd-security Wed Jul 18 22: 9:48 2001 Delivered-To: freebsd-security@freebsd.org Received: from cage.simianscience.com (cage.simianscience.com [64.7.134.1]) by hub.freebsd.org (Postfix) with ESMTP id 108AB37B401 for ; Wed, 18 Jul 2001 22:09:42 -0700 (PDT) (envelope-from mike@sentex.net) Received: (from root@localhost) by cage.simianscience.com (8.11.4/8.11.2) id f6J59fZ25357; Thu, 19 Jul 2001 01:09:41 -0400 (EDT) (envelope-from mike@sentex.net) Received: from chimp.sentex.net (fcage [192.168.0.2]) by cage.simianscience.com (8.11.4/8.11.2av) with ESMTP id f6J59aG25347; Thu, 19 Jul 2001 01:09:36 -0400 (EDT) (envelope-from mike@sentex.net) Message-Id: <5.1.0.14.0.20010719010646.03e25eb8@192.168.0.12> X-Sender: mdtancsa@192.168.0.12 X-Mailer: QUALCOMM Windows Eudora Version 5.1 Date: Thu, 19 Jul 2001 01:09:35 -0400 To: Kris Kennaway From: Mike Tancsa Subject: Re: FreeBSD remote root exploit ? Cc: security@freebsd.org In-Reply-To: <20010718213926.A19395@xor.obsecurity.org> References: <5.1.0.14.0.20010719001357.03e22638@192.168.0.12> <5.1.0.14.0.20010719001357.03e22638@192.168.0.12> Mime-Version: 1.0 Content-Type: text/plain; charset="us-ascii"; format=flowed X-Virus-Scanned: by AMaViS perl-10 Sender: owner-freebsd-security@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.org Major drag. Sadly, one of my customers needs telnetd running. Are there any alternative daemons that can be used as a temp measure that are not derived from the BSD tree ? ---Mike At 09:39 PM 7/18/2001 -0700, Kris Kennaway wrote: >I haven't been able to verify it yet; they didn't bother to give us >any advance notice before releasing to bugtraq, nor did they give us >any additional details. > >Kris > >On Thu, Jul 19, 2001 at 12:19:09AM -0400, Mike Tancsa wrote: > > > > Posted to bugtraq is a notice about telnetd being remotely root > > exploitable. Does anyone know if it is true ? > > > > ---Mike -------------------------------------------------------------------- Mike Tancsa, tel +1 519 651 3400 Network Administration, mike@sentex.net Sentex Communications www.sentex.net Cambridge, Ontario Canada www.sentex.net/mike To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message