From owner-freebsd-security  Wed Jul  3  9:11:40 2002
Delivered-To: freebsd-security@freebsd.org
Received: from mx1.FreeBSD.org (mx1.FreeBSD.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP id 4493F37B400
	for <security@freebsd.org>; Wed,  3 Jul 2002 09:11:36 -0700 (PDT)
Received: from portal.eltex.ru (eltex-gw2.nw.ru [195.19.203.86])
	by mx1.FreeBSD.org (Postfix) with ESMTP id 4DF2243E09
	for <security@freebsd.org>; Wed,  3 Jul 2002 09:11:35 -0700 (PDT)
	(envelope-from ark@eltex.ru)
Received: (from root@localhost)
	by portal.eltex.ru (8.12.3/8.11.3) id g63GBWrF075506;
	Wed, 3 Jul 2002 20:11:32 +0400 (MSD)
	(envelope-from ark@eltex.ru)
Received: from yaksha.eltex.ru (root@yaksha.eltex.ru [195.19.198.2])
	by portal.eltex.ru (8.12.3/8.11.3av) with SMTP id g63GBNDf075489;
	Wed, 3 Jul 2002 20:11:23 +0400 (MSD)
	(envelope-from ark@eltex.ru)
From: ark@eltex.ru
Received: by yaksha.eltex.ru (ssmtp TIS-1.1alpha, 17 Jan 2002); Wed, 3 Jul 2002 20:01:28 +0400
Received: from undisclosed-intranet-sender id smtpdbZ8705; Wed Jul  3 20:01:19 2002
Date: Wed, 3 Jul 2002 20:02:34 +0400
Message-Id: <200207031602.UAA03991@paranoid.eltex.ru>
In-Reply-To: <5.1.0.14.0.20020703114631.04f94d20@marble.sentex.ca> from "Mike Tancsa <mike@sentex.net>"
Organization: "Klingon Imperial Intelligence Service"
Subject: Re: Fwd: NEC's socks5 (Re: Foundstone Advisory - Buffer Overflow  in AnalogX Pro
To: mike@sentex.net
Cc: security@freebsd.org
X-Virus-Scanned: by Eltex TC
Sender: owner-freebsd-security@FreeBSD.ORG
Precedence: bulk
List-ID: <freebsd-security.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo@FreeBSD.ORG?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo@FreeBSD.ORG?subject=subscribe%20freebsd-security>
List-Unsubscribe: <mailto:majordomo@FreeBSD.ORG?subject=unsubscribe%20freebsd-security>
X-Loop: FreeBSD.org

-----BEGIN PGP SIGNED MESSAGE-----

I think it is because of icmp extentions (can't remember if remote socket is
allowed to bind privileged port but that may be a reason too)

Mike Tancsa <mike@sentex.net> said :
 
> Has anyone run the socks5 daemon below as a chrooted and non privileged 
> user ?  It binds to 1080, is there any reason it needs to even run as root ?

                                     _     _  _  _  _      _  _
 {::} {::} {::}  CU in Hell          _| o |_ | | _|| |   / _||_|   |_ |_ |_
 (##) (##) (##)        /Arkan#iD    |_  o  _||_| _||_| /   _|  | o |_||_||_|
 [||] [||] [||]            Do i believe in Bible? Hell,man,i've seen one!

-----BEGIN PGP SIGNATURE-----
Version: PGP 6.5.1i

iQCVAwUBPSMgGaH/mIJW9LeBAQE4qgP6AwE9zy+duCZyf6zQa/EwyXycr0OxGGgv
OhZSCXSgpXmCCSwbEhjSaimLVgcn9KYCdWAkaHAS51euqwh/l43bsXItkhiSiOmy
B7P1t7iA7HVyhEcGksZ3ucEvSSXGf1ftnORbypPiNd8wdNp6KWPUCGEWfAgx0/l9
vMBEwXs3KrA=
=7QLi
-----END PGP SIGNATURE-----

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message