From owner-freebsd-security Wed Jul 25 14: 4:38 2001 Delivered-To: freebsd-security@freebsd.org Received: from titan.titan-project.org (titan.titan-project.org [216.127.78.20]) by hub.freebsd.org (Postfix) with ESMTP id 7B1D137B406 for ; Wed, 25 Jul 2001 14:04:35 -0700 (PDT) (envelope-from cshumway@titan-project.org) Received: from localhost (cshumway@localhost [127.0.0.1]) by titan.titan-project.org (8.11.4/8.11.4) with ESMTP id f6PL3KQ76276; Wed, 25 Jul 2001 14:03:20 -0700 (PDT) (envelope-from cshumway@titan-project.org) Date: Wed, 25 Jul 2001 14:03:20 -0700 (PDT) From: Christopher Shumway To: Robert Herrold Cc: Subject: Re: telnet Exploit In-Reply-To: <033901c113aa$c65aebe0$6c01a8c0@mpcsecurity.com> Message-ID: <20010725135931.F75545-100000@titan.titan-project.org> MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII Sender: owner-freebsd-security@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.org On Mon, 23 Jul 2001, Robert Herrold wrote: > I have never used cvsup before, and I'm a little confused about the > current possible patch/fix. > > First off, is there a 'patch/fix/replacement for telnetd' > (/usr/libexec/telnetd). Yes. > If so, would that be included in the cvsup? As long as your CVSUping the soruce code distribution that contains telnetd's source code, then yes, your getting pretty much what the patch for telnetd contains. > Secondly, I've read through the cvsup documentation, and I'm a little > unclear on whether it is basically just downloading source, or is it > adding the packages. (do I need to recompile?) CVSUp updates your local source code repository with that on the CVSUp server you are using. It does not install binaries anywhere on the system. So, yes you will have to recompile telnetd after cvsuping. --- Christopher Shumway cshumway@titan-project.org cshumway@freebsd.org To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message