From owner-freebsd-security  Sat Jun 21 22:27:35 1997
Return-Path: <owner-security>
Received: (from root@localhost)
          by hub.freebsd.org (8.8.5/8.8.5) id WAA09390
          for security-outgoing; Sat, 21 Jun 1997 22:27:35 -0700 (PDT)
Received: from khavrinen.lcs.mit.edu (khavrinen.lcs.mit.edu [18.24.4.193])
          by hub.freebsd.org (8.8.5/8.8.5) with ESMTP id WAA09385
          for <freebsd-security@FreeBSD.ORG>; Sat, 21 Jun 1997 22:27:32 -0700 (PDT)
Received: (from wollman@localhost)
	by khavrinen.lcs.mit.edu (8.8.5/8.8.5) id BAA09678;
	Sun, 22 Jun 1997 01:27:20 -0400 (EDT)
Date: Sun, 22 Jun 1997 01:27:20 -0400 (EDT)
From: Garrett Wollman <wollman@khavrinen.lcs.mit.edu>
Message-Id: <199706220527.BAA09678@khavrinen.lcs.mit.edu>
To: "Daniel O'Callaghan" <danny@panda.hilink.com.au>
Cc: freebsd-security@FreeBSD.ORG
Subject: Simple TCP service can hang a system (fwd)
In-Reply-To: <Pine.BSF.3.91.970622142206.869L-100000@panda.hilink.com.au>
References: <Pine.BSF.3.91.970622142206.869L-100000@panda.hilink.com.au>
Sender: owner-security@FreeBSD.ORG
X-Loop: FreeBSD.org
Precedence: bulk

<<On Sun, 22 Jun 1997 14:22:49 +1000 (EST), "Daniel O'Callaghan" <danny@panda.hilink.com.au> said:

> I've noticed that inetd doesn't check the source port for the request
> to UDP simple services (echo, time, chargen, daytime).

This was fixed in FreeBSD about two or three years ago...

-GAWollman

--
Garrett A. Wollman   | O Siem / We are all family / O Siem / We're all the same
wollman@lcs.mit.edu  | O Siem / The fires of freedom 
Opinions not those of| Dance in the burning flame
MIT, LCS, CRS, or NSA|                     - Susan Aglukark and Chad Irschick