From owner-freebsd-security Tue May 26 09:16:09 1998 Return-Path: Received: (from majordom@localhost) by hub.freebsd.org (8.8.8/8.8.8) id JAA25403 for freebsd-security-outgoing; Tue, 26 May 1998 09:16:09 -0700 (PDT) (envelope-from owner-freebsd-security@FreeBSD.ORG) Received: from firewall.ftf.dk (root@mail.ftf.dk [129.142.64.2]) by hub.freebsd.org (8.8.8/8.8.8) with ESMTP id JAA25209 for ; Tue, 26 May 1998 09:15:44 -0700 (PDT) (envelope-from regnauld@deepo.prosa.dk) Received: from mail.prosa.dk ([192.168.100.2]) by firewall.ftf.dk (8.7.6/8.7.3) with ESMTP id UAA10261; Tue, 26 May 1998 20:16:43 +0200 Received: from deepo.prosa.dk (deepo.prosa.dk [192.168.100.10]) by mail.prosa.dk (8.8.5/8.8.5/prosa-1.1) with ESMTP id SAA08097; Tue, 26 May 1998 18:15:13 +0200 (CEST) Received: (from regnauld@localhost) by deepo.prosa.dk (8.8.7/8.8.5/prosa-1.1) id SAA11861; Tue, 26 May 1998 18:14:25 +0200 (CEST) Message-ID: <19980526181425.28553@deepo.prosa.dk> Date: Tue, 26 May 1998 18:14:25 +0200 From: Philippe Regnauld To: spork Cc: freebsd-security@FreeBSD.ORG Subject: Re: possible problem with portmap References: <199805252002.NAA14219@antipodes.cdrom.com> Mime-Version: 1.0 Content-Type: text/plain; charset=iso-8859-1 Content-Transfer-Encoding: 8bit X-Mailer: Mutt 0.88e In-Reply-To: ; from spork on Tue, May 26, 1998 at 11:36:50AM -0400 X-Operating-System: FreeBSD 2.2.5-STABLE i386 Organization: PROSA Sender: owner-freebsd-security@FreeBSD.ORG Precedence: bulk spork writes: > Did anyone quite understand the "nfs-shell" thread on bugtraq? It was > discussed shortly after the portmap DoS thread. From what I could gather > you could get an interactive shell via nfs?? Err, I think it was more like a command-shell to test/debug NFS-related things. -- -[ Philippe Regnauld / sysadmin / regnauld@deepo.prosa.dk / +55.4N +11.3E ]- «Pluto placed his bad dog at the entrance of Hades to keep the dead IN and the living OUT! The archetypical corporate firewall?» - S. Kelly Bootle To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe security" in the body of the message