From owner-freebsd-security Fri Jan 21 10: 9:22 2000 Delivered-To: freebsd-security@freebsd.org Received: from pogo.caustic.org (pogo.caustic.org [208.44.193.69]) by hub.freebsd.org (Postfix) with ESMTP id A8CE91542C for ; Fri, 21 Jan 2000 10:09:17 -0800 (PST) (envelope-from jan@caustic.org) Received: from localhost (jan@localhost) by pogo.caustic.org (8.9.3/ignatz) with ESMTP id KAA89064; Fri, 21 Jan 2000 10:09:38 -0800 (PST) Date: Fri, 21 Jan 2000 10:09:38 -0800 (PST) From: "f.johan.beisser" To: Jared Mauch Cc: Brett Glass , security@FreeBSD.ORG Subject: Re: Traffic on Bugtraq In-Reply-To: <20000121130204.C30675@puck.nether.net> Message-ID: MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII Sender: owner-freebsd-security@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org i just got two messages from bugtraq, with the explanation of stream.c, and how it works.. sooo... guess it's there :) along with how to defend against it -- jan On Fri, 21 Jan 2000, Jared Mauch wrote: > They only approve the messages once a day or once every few > days is the way it appears to me based on my mailbox flow. > > I'll go two or three days without any bugtraq mail, then > get about 25 all within 10 minutes. > > - jared > > On Fri, Jan 21, 2000 at 10:51:59AM -0700, Brett Glass wrote: > > Funny: I've posted a few items to Bugtraq containing workarounds > > for the stream.c 'sploit, and NONE of them have come back to me > > via the list. In fact, I've gotten no traffic from this normally > > busy list since yesterday noon. > > > > I wonder: is "Aleph Null" off patching systems? Or was the list server > > itself, or one of its upstream routers, hit? > > > > --Brett > > > > > > > > To Unsubscribe: send mail to majordomo@FreeBSD.org > > with "unsubscribe freebsd-security" in the body of the message > > -- > Jared Mauch | pgp key available via finger from jared@puck.nether.net > clue++; | http://puck.nether.net/~jared/ My statements are only mine. > END OF LINE | > > > To Unsubscribe: send mail to majordomo@FreeBSD.org > with "unsubscribe freebsd-security" in the body of the message > +-----// f. johan beisser //------------------------------+ email: jan[at]caustic.org web: http://www.caustic.org/~jan "knowledge is power. power corrupts. study hard, be evil." To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message