From owner-freebsd-security  Tue Dec 10 09:39:48 1996
Return-Path: <owner-security>
Received: (from root@localhost)
          by freefall.freebsd.org (8.8.4/8.8.4) id JAA16826
          for security-outgoing; Tue, 10 Dec 1996 09:39:48 -0800 (PST)
Received: from passer.osg.gov.bc.ca (0@passer.osg.gov.bc.ca [142.32.110.29])
          by freefall.freebsd.org (8.8.4/8.8.4) with ESMTP id JAA16821
          for <freebsd-security@freebsd.org>; Tue, 10 Dec 1996 09:39:46 -0800 (PST)
Received: from localhost (15005@localhost [127.0.0.1]) by passer.osg.gov.bc.ca (8.8.4/8.6.10) with SMTP id JAA22495; Tue, 10 Dec 1996 09:38:40 -0800 (PST)
From: Cy Schubert - ITSD Open Systems Group <cschuber@uumail.gov.bc.ca>
Message-Id: <199612101738.JAA22495@passer.osg.gov.bc.ca>
X-Authentication-Warning: passer.osg.gov.bc.ca: 15005@localhost [127.0.0.1] didn't use HELO protocol
Reply-to: cschuber@uumail.gov.bc.ca
X-Mailer: MH
X-Sender: cschuber
To: igor@alecto.physics.uiuc.edu (Igor Roshchin)
cc: bugs@freebsd.netcom.com (Mark Hittinger), taob@io.org,
        freebsd-security@freebsd.org
Subject: Re: URGENT: Packet sniffer found on my system 
In-reply-to: Your message of "Tue, 10 Dec 96 10:14:38 CST."
             <199612101614.KAA21524@alecto.physics.uiuc.edu> 
Date: Tue, 10 Dec 96 09:38:39 -0800
X-Mts: smtp
Sender: owner-security@freebsd.org
X-Loop: FreeBSD.org
Precedence: bulk

> > The wu-ftpd looks a little old - it probably does not have Hobbit's fixes
> > in it.  You might want to get the beta-11 of wu-ftpd and put that up.  The
> > beta-11 incorporates Hobbit's fixes.
> 
> What are those Hobbit's fixes ?

The Hobbit's fixkits are a various assortment of fixes for a few software
packages such as wu-ftpd, sendmail 8.6.10, TCP/Wrapper 7,2, among other
things.  All of the fixes are for older versions of the software.  As stated
above, you're probably better off with wu-ftpd-beta11.

You can get wu-ftpd-beta11 from 
ftp://ftp.academ.com/pub/wu-ftpd/private/wu-ftpd-2.4.2-beta-11.tar.Z.
Washington University at Saint Louis no longer supports wu-ftpd.

> Where can one get those ?

You can get the Hobbit's fixkits from ftp://ftp.avian.org/src/fixkits.

> Why are they not incorporated in ports ?

Now that wu-ftpd is maintained by Academ Consulting Services, are there any
legal issues with incorporating beta-11 in ports?


Regards,                       Phone:  (250)387-8437
Cy Schubert                    OV/VM:  BCSC02(CSCHUBER)
Open Systems Support          BITNET:  CSCHUBER@BCSC02.BITNET
ITSD                        Internet:  cschuber@uumail.gov.bc.ca
                                       cschuber@bcsc02.gov.bc.ca

		"Quit spooling around, JES do it."