From owner-freebsd-security  Mon Sep  3  6:11:15 2001
Delivered-To: freebsd-security@freebsd.org
Received: from pa169.kurdwanowa.sdi.tpnet.pl (pa169.kurdwanowa.sdi.tpnet.pl [213.77.148.169])
	by hub.freebsd.org (Postfix) with ESMTP id 3A23E37B401
	for <freebsd-security@freebsd.org>; Mon,  3 Sep 2001 06:11:08 -0700 (PDT)
Received: by pa169.kurdwanowa.sdi.tpnet.pl (Postfix, from userid 1001)
	id CCE2A1D14; Mon,  3 Sep 2001 15:10:37 +0200 (CEST)
Received: from localhost (localhost [127.0.0.1])
	by pa169.kurdwanowa.sdi.tpnet.pl (Postfix) with ESMTP id 39157552A
	for <freebsd-security@freebsd.org>; Mon,  3 Sep 2001 15:10:36 +0200 (CEST)
Date: Mon, 3 Sep 2001 15:10:35 +0200 (CEST)
From: Krzysztof Zaraska <kzaraska@student.uci.agh.edu.pl>
X-Sender: kzaraska@lhotse.zaraska.dhs.org
To: freebsd-security@freebsd.org
Subject: BUGTRAQ: S/Key + sudo
Message-ID: <Pine.BSF.4.21.0109031501010.560-100000@lhotse.zaraska.dhs.org>
MIME-Version: 1.0
Content-Type: TEXT/PLAIN; charset=US-ASCII
Sender: owner-freebsd-security@FreeBSD.ORG
Precedence: bulk
List-ID: <freebsd-security.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo@FreeBSD.ORG?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo@FreeBSD.ORG?subject=subscribe%20freebsd-security>
List-Unsubscribe: <mailto:majordomo@FreeBSD.ORG?subject=unsubscribe%20freebsd-security>
X-Loop: FreeBSD.org

A letter describing a security hazard involving sudo and S/KEY has been
posted to BUGTRAQ today. The author states he brought up this matter on
this list before and alerted Security Officer but no improvement was
made.

You may read it at:
http://www.securityfocus.com/templates/archive.pike?threads=0&list=1&fromthread=0&end=2001-09-08&mid=211551&start=2001-09-02&



To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message