From owner-freebsd-bugs Sat Jan 26 16:50:17 2002 Delivered-To: freebsd-bugs@hub.freebsd.org Received: from freefall.freebsd.org (freefall.FreeBSD.org [216.136.204.21]) by hub.freebsd.org (Postfix) with ESMTP id F311837B41C for ; Sat, 26 Jan 2002 16:50:00 -0800 (PST) Received: (from gnats@localhost) by freefall.freebsd.org (8.11.6/8.11.6) id g0R0o0i80889; Sat, 26 Jan 2002 16:50:00 -0800 (PST) (envelope-from gnats) Received: from mail.tgd.net (mail.tgd.net [209.81.25.10]) by hub.freebsd.org (Postfix) with ESMTP id 4E18737B404 for ; Sat, 26 Jan 2002 16:47:04 -0800 (PST) Received: by mail.tgd.net (Postfix, from userid 0) id 2CEF020F16; Sat, 26 Jan 2002 16:46:59 -0800 (PST) Message-Id: <20020127004659.2CEF020F16@mail.tgd.net> Date: Sat, 26 Jan 2002 16:46:59 -0800 (PST) From: Sean Chittenden Reply-To: Sean Chittenden To: FreeBSD-gnats-submit@freebsd.org X-Send-Pr-Version: 3.113 Subject: conf/34317: /etc/inetd.conf has cvskserver listening on an unknown port Sender: owner-freebsd-bugs@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.org >Number: 34317 >Category: conf >Synopsis: /etc/inetd.conf has cvskserver listening on an unknown port >Confidential: no >Severity: non-critical >Priority: medium >Responsible: freebsd-bugs >State: open >Quarter: >Keywords: >Date-Required: >Class: sw-bug >Submitter-Id: current-users >Arrival-Date: Sat Jan 26 16:50:00 PST 2002 >Closed-Date: >Last-Modified: >Originator: Sean Chittenden >Release: FreeBSD 4.5-RC i386 >Organization: >Environment: System: FreeBSD ninja1.internal 4.5-RC FreeBSD 4.5-RC #0: Thu Jan 10 14:10:58 PST 2002 root@ninja1.internal:/opt/obj/opt/src/sys/NINJA i386 >Description: Kerberized CVS (kserver) listens on the same port as normal CVS (pserver). In /etc/inetd.conf cvs kserver is disabled by default, but set to listen to the service port 'cvs' which doesn't exist. It should listen to 'cvspserver'. >How-To-Repeat: >Fix: --- /etc/inetd.conf.orig Sat Jan 5 16:30:03 2002 +++ /etc/inetd.conf Sat Jan 26 16:42:41 2002 @@ -72,7 +72,7 @@ # deadly security hole. # #cvspserver stream tcp nowait root /usr/bin/cvs cvs --allow-root=/your/cvsroot/here pserver -#cvs stream tcp nowait root /usr/bin/cvs cvs --allow-root=/your/cvsroot/here kserver +#cvspserver stream tcp nowait root /usr/bin/cvs cvs --allow-root=/your/cvsroot/here kserver # # RPC based services (you MUST have portmapper running to use these) # >Release-Note: >Audit-Trail: >Unformatted: To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-bugs" in the body of the message