From owner-freebsd-security  Thu Oct 26 03:42:44 1995
Return-Path: owner-security
Received: (from root@localhost)
          by freefall.freebsd.org (8.6.12/8.6.6) id DAA00797
          for security-outgoing; Thu, 26 Oct 1995 03:42:44 -0700
Received: from racer.dkrz.de (racer.dkrz.de [136.172.110.55])
          by freefall.freebsd.org (8.6.12/8.6.6) with ESMTP id DAA00787
          for <security@freebsd.org>; Thu, 26 Oct 1995 03:42:31 -0700
Received: from madonna.dkrz.de.dkrz.de (madonna.dkrz.de [136.172.110.69]) by racer.dkrz.de (8.7.1/8.7.1) with SMTP id LAA16603; Thu, 26 Oct 1995 11:40:08 +0100 (MET)
Date: Thu, 26 Oct 1995 11:40:08 +0100 (MET)
From: "Georg-W. Koltermann" <gwk@racer.dkrz.de>
Message-Id: <199510261040.LAA16603@racer.dkrz.de>
Received: by madonna.dkrz.de.dkrz.de (4.1/SMI-4.1)
	id AA04223; Thu, 26 Oct 95 11:40:49 +0100
To: phk@critter.tfs.com
Cc: davidg@Root.COM, dab@berserkly.cray.com, hartmans@mit.edu,
        security@freebsd.org
In-Reply-To: <3161.814611787@critter.tfs.com> (message from Poul-Henning Kamp on Wed, 25 Oct 1995 10:03:07 +0100)
Subject: Re: telnetd fix
Reply-To: gwk@cray.com
Sender: owner-security@freebsd.org
Precedence: bulk

> X-Authentication-Warning: critter.tfs.com: Host localhost didn't use HELO protocol
> cc: dab@berserkly.cray.com (David A. Borman), hartmans@mit.edu,
>         security@freebsd.org
> Date: Wed, 25 Oct 1995 10:03:07 +0100
> From: Poul-Henning Kamp <phk@critter.tfs.com>
> Sender: owner-security@freebsd.org
> Precedence: bulk
> 
> >    At the moment, I'm seriously considering adding a switch to shut off the
> > feature in FreeBSD's telnetd and making it the default in inetd.conf.
> 
> YES!
> 
> --
> Poul-Henning Kamp           | phk@FreeBSD.ORG       FreeBSD Core-team.

NO!

I'd rather like to see a statically linked login, which would plug the
hole without any side-effects.

Regards,

Georg-W. Koltermann, gwk@cray.com