From owner-freebsd-hackers Tue Aug 4 19:52:15 1998 Return-Path: Received: (from majordom@localhost) by hub.freebsd.org (8.8.8/8.8.8) id TAA20875 for freebsd-hackers-outgoing; Tue, 4 Aug 1998 19:52:15 -0700 (PDT) (envelope-from owner-freebsd-hackers@FreeBSD.ORG) Received: from smtp03.primenet.com (smtp03.primenet.com [206.165.6.133]) by hub.freebsd.org (8.8.8/8.8.8) with ESMTP id TAA20863 for ; Tue, 4 Aug 1998 19:52:10 -0700 (PDT) (envelope-from tlambert@usr02.primenet.com) Received: (from daemon@localhost) by smtp03.primenet.com (8.8.8/8.8.8) id TAA16353; Tue, 4 Aug 1998 19:51:59 -0700 (MST) Received: from usr02.primenet.com(206.165.6.202) via SMTP by smtp03.primenet.com, id smtpd016311; Tue Aug 4 19:51:58 1998 Received: (from tlambert@localhost) by usr02.primenet.com (8.8.5/8.8.5) id TAA04173; Tue, 4 Aug 1998 19:51:56 -0700 (MST) From: Terry Lambert Message-Id: <199808050251.TAA04173@usr02.primenet.com> Subject: Re: PAM4FreeBSD To: jdp@polstra.com (John Polstra) Date: Wed, 5 Aug 1998 02:51:56 +0000 (GMT) Cc: tlambert@primenet.com, hackers@FreeBSD.ORG In-Reply-To: <199808050111.SAA13166@austin.polstra.com> from "John Polstra" at Aug 4, 98 06:11:05 pm X-Mailer: ELM [version 2.4 PL25] MIME-Version: 1.0 Content-Type: text/plain; charset=US-ASCII Content-Transfer-Encoding: 7bit Sender: owner-freebsd-hackers@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.ORG > > Be sure and look at BugTraq and the DOE CICE lists > > OK, I give up. Yahoo has failed me. Altavista has let me down. > > What's a "DOE CICE" and where do I find it? :-} Ugh. CIAC. The US Department Of Energy Computer Incident Advisory Capability. http://ciac.llnl.gov/cgi-bin/index/bulletins Sorry about that. Note that the incidents reported here are listed mostly under the programs compromized by them, and don't (usually) explicitly reference PAM (instead they reference things like NIS+ cache compromise", etc.). The Bugtraq stuff is at: http://www.geek-girl.com/bugtraq/ These reference PAM explicitly. You should include CERT in the list, as well, while I'm at it... http://www.cert.org/nav/alerts.html ...what the heck, you might as well add: http://www.secnet.com/nav1.html They don't have anything on PAM, but they have an lpd vunlerability in FreeBSD 2.1.7 listed... as well as one against Vixie's cron. 8-|. Terry Lambert terry@lambert.org --- Any opinions in this posting are my own and not those of my present or previous employers. To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-hackers" in the body of the message