Date: Tue, 29 Feb 2000 08:16:20 +0200 From: Mark Murray <mark@grondar.za> To: "Daniel O'Connor" <doconnor@gsoft.com.au> Cc: Mark Murray <mark@grondar.za>, cvs-all@FreeBSD.org, cvs-committers@FreeBSD.org, Mark Murray <markm@FreeBSD.org>, Robert Watson <robert+freebsd@cyrus.watson.org> Subject: Re: cvs commit: src/crypto/openssh auth-krb5.c auth-krb4.c auth- Message-ID: <200002290616.IAA29118@grimreaper.grondar.za> In-Reply-To: <XFMail.000229104324.doconnor@gsoft.com.au> ; from "Daniel O'Connor" <doconnor@gsoft.com.au> "Tue, 29 Feb 2000 10:43:24 %2B1030." References: <XFMail.000229104324.doconnor@gsoft.com.au>
next in thread | previous in thread | raw e-mail | index | archive | help
>
> On 28-Feb-00 Mark Murray wrote:
> > At the moment, X11 forwarding is ON. I saw a convincing argument
> > on bugtraq today for turning it off.
>
> Care to share? I don't subscribe and I can't find an up to date archive :(
> (securityfocus is lagged a few days ):
If you have forwarding on, you run xauth on the other side. It's
eas{y|ier} to compromise that, and attack X with tunnelling. (In
a nutshell).
M
--
Mark Murray
Join the anti-SPAM movement: http://www.cauce.org
To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe cvs-all" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?200002290616.IAA29118>