From owner-freebsd-security Fri Jul 27 11:40:34 2001 Delivered-To: freebsd-security@freebsd.org Received: from obsecurity.dyndns.org (adsl-64-169-104-149.dsl.lsan03.pacbell.net [64.169.104.149]) by hub.freebsd.org (Postfix) with ESMTP id 48AC637B403 for ; Fri, 27 Jul 2001 11:40:31 -0700 (PDT) (envelope-from kris@obsecurity.org) Received: by obsecurity.dyndns.org (Postfix, from userid 1000) id 8368E66B25; Fri, 27 Jul 2001 11:40:30 -0700 (PDT) Date: Fri, 27 Jul 2001 11:40:30 -0700 From: Kris Kennaway To: "Andrew R. Reiter" Cc: kris@obsecurity.org, freebsd-security@freebsd.org Subject: Re: inetd.conf -- IPv6 telnet Message-ID: <20010727114029.C31276@xor.obsecurity.org> References: Mime-Version: 1.0 Content-Type: multipart/signed; micalg=pgp-md5; protocol="application/pgp-signature"; boundary="lMM8JwqTlfDpEaS6" Content-Disposition: inline User-Agent: Mutt/1.2.5i In-Reply-To: ; from arr@watson.org on Fri, Jul 27, 2001 at 01:06:12PM -0400 Sender: owner-freebsd-security@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.org --lMM8JwqTlfDpEaS6 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline Content-Transfer-Encoding: quoted-printable On Fri, Jul 27, 2001 at 01:06:12PM -0400, Andrew R. Reiter wrote: > kris, >=20 > just wondering about this thing i just noticed in 4-stable that telnet > comes default running under IPv6 in inetd.conf. not sure how likely > someone would exploit over IPv6, but i was wondering about consistancy in > relation to what's being done already for IPv4? What do you mean by 'consistency'? It's the same source code (hence already fixed), and the advisory mentioned disabling both ipv4 and ipv6 telnetd services as a workaround. Kris --lMM8JwqTlfDpEaS6 Content-Type: application/pgp-signature Content-Disposition: inline -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.0.6 (FreeBSD) Comment: For info see http://www.gnupg.org iD8DBQE7YbWdWry0BWjoQKURAkPwAJ9itHcdmRhg8wGrf23By2qhvKxvGQCdE5N9 j8RqUKdEvxiUjY6dHwS4YXo= =P//G -----END PGP SIGNATURE----- --lMM8JwqTlfDpEaS6-- To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message