From owner-freebsd-bugs Sat Oct 14 10:31:56 1995 Return-Path: owner-bugs Received: (from root@localhost) by freefall.freebsd.org (8.6.12/8.6.6) id KAA13656 for bugs-outgoing; Sat, 14 Oct 1995 10:31:56 -0700 Received: from xkis.nnov.su (root@gw04.kis.nnov.su [194.87.66.4]) by freefall.freebsd.org (8.6.12/8.6.6) with ESMTP id KAA13650 for ; Sat, 14 Oct 1995 10:31:38 -0700 Received: by xkis.nnov.su id UAA20828; (8.6.8/D) Sat, 14 Oct 1995 20:19:34 +0300 From: dv@xkis.nnov.su (Dmitry Valdov) Message-Id: <199510141719.UAA20828@xkis.nnov.su> Subject: secure finger is not enought secure To: freebsd-bugs@freebsd.org Date: Sat, 14 Oct 1995 20:19:28 +0300 (MSK) X-Mailer: ELM [version 2.4 PL24] MIME-Version: 1.0 Content-Type: text/plain; charset=koi8-r Content-Transfer-Encoding: 8bit Content-Length: 728 Sender: owner-bugs@freebsd.org Precedence: bulk Hi! is this a bug or feature? ;-) if i trying to finger host without providing username: -- merahq: {1} finger @localhost [localhost] must provide username -- But i can finger this host anyway (without specifying username): -- merahq: {2} telnet localhost finger Trying 127.0.0.1... Connected to localhost. Escape character is '^]'. -l Login: dv Name: Dmitry Valdov Directory: /usr/u/dv Shell: /bin/csh On since Sat Oct 14 20:09 (MSK) on ttyp0 (messages off) from gw09 No Mail. Mail forwarded to: dv@xkis.nnov.su No Plan. Connection closed by foreign host. -- Is this true? This works on all version from 2.0 to 2.2-current. Dmitry. PS. Sorry for my poor english..