From owner-freebsd-bugs  Sat Oct 14 10:57:37 1995
Return-Path: owner-bugs
Received: (from root@localhost)
          by freefall.freebsd.org (8.6.12/8.6.6) id KAA14058
          for bugs-outgoing; Sat, 14 Oct 1995 10:57:37 -0700
Received: from irz301.inf.tu-dresden.de (irz301.inf.tu-dresden.de [141.76.1.11])
          by freefall.freebsd.org (8.6.12/8.6.6) with ESMTP id KAA14053
          for <freebsd-bugs@freebsd.org>; Sat, 14 Oct 1995 10:57:33 -0700
Received: from sax.sax.de by irz301.inf.tu-dresden.de (8.6.12/8.6.12-s1) with ESMTP id SAA02029; Sat, 14 Oct 1995 18:57:24 +0100
Received: by sax.sax.de (8.6.11/8.6.12-s1) with UUCP
	id SAA00414; Sat, 14 Oct 1995 18:57:24 +0100
Received: (from j@localhost) by uriah.heep.sax.de (8.6.12/8.6.9) id SAA11380; Sat, 14 Oct 1995 18:56:46 +0100
From: J Wunsch <j@uriah.heep.sax.de>
Message-Id: <199510141756.SAA11380@uriah.heep.sax.de>
Subject: Re: secure finger is not enought secure
To: dv@xkis.nnov.su (Dmitry Valdov)
Date: Sat, 14 Oct 1995 18:56:45 +0100 (MET)
Cc: freebsd-bugs@freebsd.org
Reply-To: joerg_wunsch@uriah.heep.sax.de (Joerg Wunsch)
In-Reply-To: <199510141719.UAA20828@xkis.nnov.su> from "Dmitry Valdov" at Oct 14, 95 08:19:28 pm
X-Phone: +49-351-2012 669
X-Mailer: ELM [version 2.4 PL23]
MIME-Version: 1.0
Content-Type: text/plain; charset=ISO-8859-1
Content-Transfer-Encoding: 8bit
Content-Length: 775       
Sender: owner-bugs@freebsd.org
Precedence: bulk

As Dmitry Valdov wrote:
> 
> is this a bug or feature? ;-)
> if i trying to finger host without providing username:
> 
> --
> 
> merahq: {1} finger @localhost
> [localhost]
> must provide username

This is a feature.

> But i can finger this host anyway (without specifying username):
> 
> --
> 
> merahq: {2} telnet localhost finger
> Trying 127.0.0.1...
> Connected to localhost.
> Escape character is '^]'.

This is an entirely different matter.  It's not the finger service as
invoked via inetd(8).  If you've already got access to the local
machine, it doesn't make sense if you couldn't run finger locally.

-- 
cheers, J"org

joerg_wunsch@uriah.heep.sax.de -- http://www.sax.de/~joerg/ -- NIC: JW11-RIPE
Never trust an operating system you don't have sources for. ;-)