From owner-freebsd-security Wed May 27 02:55:18 1998 Return-Path: Received: (from majordom@localhost) by hub.freebsd.org (8.8.8/8.8.8) id CAA19208 for freebsd-security-outgoing; Wed, 27 May 1998 02:55:18 -0700 (PDT) (envelope-from owner-freebsd-security@FreeBSD.ORG) Received: from cheops.anu.edu.au (avalon@cheops.anu.edu.au [150.203.76.24]) by hub.freebsd.org (8.8.8/8.8.8) with ESMTP id CAA19200 for ; Wed, 27 May 1998 02:55:12 -0700 (PDT) (envelope-from avalon@coombs.anu.edu.au) Message-Id: <199805270955.CAA19200@hub.freebsd.org> Received: by cheops.anu.edu.au (1.37.109.16/16.2) id AA076192871; Wed, 27 May 1998 19:54:31 +1000 From: Darren Reed Subject: Re: possible problem with portmap To: spork@super-g.com (spork) Date: Wed, 27 May 1998 19:54:31 +1000 (EST) Cc: mike@smith.net.au, paul@mu.org, freebsd-security@FreeBSD.ORG In-Reply-To: from "spork" at May 26, 98 11:36:50 am X-Mailer: ELM [version 2.4 PL23] Content-Type: text Sender: owner-freebsd-security@FreeBSD.ORG Precedence: bulk In some mail from spork, sie said: > > Did anyone quite understand the "nfs-shell" thread on bugtraq? It was > discussed shortly after the portmap DoS thread. From what I could gather > you could get an interactive shell via nfs?? Yup. That program was first written in 1991...there are at least two variations on it. It is very useful for doing things like ftp via NFS from an ftp server that has world exports for read on which you don't have an account and when you're not root. Darren To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe security" in the body of the message