Skip site navigation (1)Skip section navigation (2)
Date:      Fri, 27 Jul 2001 11:40:30 -0700
From:      Kris Kennaway <kris@obsecurity.org>
To:        "Andrew R. Reiter" <arr@watson.org>
Cc:        kris@obsecurity.org, freebsd-security@freebsd.org
Subject:   Re: inetd.conf -- IPv6 telnet
Message-ID:  <20010727114029.C31276@xor.obsecurity.org>
In-Reply-To: <Pine.NEB.3.96L.1010727130429.63491A-100000@fledge.watson.org>; from arr@watson.org on Fri, Jul 27, 2001 at 01:06:12PM -0400
References:  <Pine.NEB.3.96L.1010727130429.63491A-100000@fledge.watson.org>

next in thread | previous in thread | raw e-mail | index | archive | help

--lMM8JwqTlfDpEaS6
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

On Fri, Jul 27, 2001 at 01:06:12PM -0400, Andrew R. Reiter wrote:
> kris,
>=20
> just wondering about this thing i just noticed in 4-stable that telnet
> comes default running under IPv6 in inetd.conf.  not sure how likely
> someone would exploit over IPv6, but i was wondering about consistancy in
> relation to what's being done already for IPv4?

What do you mean by 'consistency'?  It's the same source code (hence
already fixed), and the advisory mentioned disabling both ipv4 and
ipv6 telnetd services as a workaround.

Kris

--lMM8JwqTlfDpEaS6
Content-Type: application/pgp-signature
Content-Disposition: inline

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.0.6 (FreeBSD)
Comment: For info see http://www.gnupg.org

iD8DBQE7YbWdWry0BWjoQKURAkPwAJ9itHcdmRhg8wGrf23By2qhvKxvGQCdE5N9
j8RqUKdEvxiUjY6dHwS4YXo=
=P//G
-----END PGP SIGNATURE-----

--lMM8JwqTlfDpEaS6--

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20010727114029.C31276>