Date: Thu, 26 Jul 2001 04:01:15 -0700 From: Kris Kennaway <kris@obsecurity.org> To: Ted Mittelstaedt <tedm@toybox.placo.com> Cc: Kris Kennaway <kris@obsecurity.org>, Shawn Ramsey <shawn@megadeth.org>, questions@FreeBSD.ORG Subject: Re: telnetd problem? Message-ID: <20010726040113.A41239@xor.obsecurity.org> In-Reply-To: <00b401c115b4$b78dbaa0$1401a8c0@tedm.placo.com>; from tedm@toybox.placo.com on Thu, Jul 26, 2001 at 02:24:06AM -0700 References: <20010726004017.A42068@xor.obsecurity.org> <00b401c115b4$b78dbaa0$1401a8c0@tedm.placo.com>
index | next in thread | previous in thread | raw e-mail
[-- Attachment #1 --] On Thu, Jul 26, 2001 at 02:24:06AM -0700, Ted Mittelstaedt wrote: > That's a bandaid. He stated that the problem wasn't happening until > he updated to the new code, so obviously a patch they put into the > telnetd broke something. No, Ted, that's not obvious. Exploitation of this problem has become much more widespread since the public distribution of the exploit code yesterday. The poster hasn't shown that there's a problem inconsistent with lots of people throwing data at his telnetd trying to exploit it. Kris [-- Attachment #2 --] -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.0.6 (FreeBSD) Comment: For info see http://www.gnupg.org iD8DBQE7X/h4Wry0BWjoQKURAkaiAKDFB73BO9U4yV22W0vnBWW5bTZrpwCgkL2O PcRtyhHOaRt5IPoa8+vWy3s= =kduP -----END PGP SIGNATURE-----help
Want to link to this message? Use this
URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20010726040113.A41239>