From owner-freebsd-security Tue Jan 21 09:18:42 1997 Return-Path: Received: (from root@localhost) by freefall.freebsd.org (8.8.4/8.8.4) id JAA00539 for security-outgoing; Tue, 21 Jan 1997 09:18:42 -0800 (PST) Received: from whale.gu.kiev.ua (proxy.gu.kiev.ua [194.93.190.4]) by freefall.freebsd.org (8.8.4/8.8.4) with ESMTP id JAA00532 for ; Tue, 21 Jan 1997 09:18:32 -0800 (PST) Received: from trifork.gu.net (trifork.gu.net [194.93.190.194]) by whale.gu.kiev.ua (8.7.5/8.7.3) with ESMTP id TAA37978 for ; Tue, 21 Jan 1997 19:18:07 +0200 X-Received: from brimstone (brimstone.netspace.org [128.148.157.143]) by creator.gu.kiev.ua with ESMTP id SAA18737 for ; Tue, 21 Jan 1997 18:12:14 +0200 X-Received: from netspace.org ([128.148.157.6]) by brimstone.netspace.org with ESMTP id <34235-27020>; Tue, 21 Jan 1997 11:08:47 -0500 X-Received: from netspace.org (unknown@netspace [128.148.157.6]) by netspace.org (8.8.2/8.8.2) with SMTP id LAA19976; Tue, 21 Jan 1997 11:04:36 -0500 X-Received: from NETSPACE.ORG by NETSPACE.ORG (LISTSERV-TCP/IP release 1.8b) with spool id 2315798 for BUGTRAQ@NETSPACE.ORG; Tue, 21 Jan 1997 10:51:22 +1900 X-Received: from netspace.org (unknown@netspace [128.148.157.6]) by netspace.org (8.8.2/8.8.2) with SMTP id KAA18463 for ; Tue, 21 Jan 1997 10:50:23 -0500 Approved-By: ALEPH1@UNDERGROUND.ORG X-Received: from burgundy.eecs.harvard.edu (dholland@burgundy.eecs.harvard.edu [140.247.60.165]) by netspace.org (8.8.2/8.8.2) with ESMTP id XAA18655 for ; Mon, 20 Jan 1997 23:25:46 -0500 X-Received: (from dholland@localhost) by burgundy.eecs.harvard.edu (8.7.3/8.6.9) id XAA00454 for bugtraq@netspace.org; Mon, 20 Jan 1997 23:25:48 -0500 (EST) X-Mailer: ELM [version 2.4 PL25] MIME-Version: 1.0 Content-Type: text/plain; charset=US-ASCII Content-Transfer-Encoding: 7bit Approved-By: David Holland Message-ID: <199701210425.XAA00454@burgundy.eecs.harvard.edu> Date: Mon, 20 Jan 1997 23:25:48 -0500 Reply-To: David Holland From: David Holland Subject: Re: talkd problem To: Multiple recipients of list BUGTRAQ In-Reply-To: <199701210246.TAA27525@zeus.theos.com> from "Theo de Raadt" at Jan 20, 97 07:46:28 pm ReSent-Date: Tue, 21 Jan 1997 19:17:57 +0200 (EET) ReSent-From: Andrew Stesin ReSent-To: security@freebsd.org ReSent-Message-ID: Sender: owner-security@freebsd.org X-Loop: FreeBSD.org Precedence: bulk > revision 1.4 > date: 1996/07/17 23:41:10; author: deraadt; state: Exp; lines: +10 -8 > buffer overflow from dholland@hcs.HARVARD.EDU; could do with some cleanup? > [...] > > I really like it when we get to fix a security hole 5 months before > everyone else. "Everyone else" should do something about that. 'cept for us, of course. :-) I *tried* to get the information out to people, but it's like pulling teeth sometimes. Anyone who's maintaining BSD user-level network tools and doesn't have my fixes, please feel free to get in touch with me. This talkd thing was one of the first things I found, and I've been racking up more in the past few months. :-/ -- - David A. Holland | VINO project home page: dholland@eecs.harvard.edu | http://www.eecs.harvard.edu/vino