Skip site navigation (1)Skip section navigation (2)
Date:      Sat, 14 Oct 1995 20:19:28 +0300 (MSK)
From:      dv@xkis.nnov.su (Dmitry Valdov)
To:        freebsd-bugs@freebsd.org
Subject:   secure finger is not enought secure
Message-ID:  <199510141719.UAA20828@xkis.nnov.su>

next in thread | raw e-mail | index | archive | help
Hi!

is this a bug or feature? ;-)
if i trying to finger host without providing username:

--

merahq: {1} finger @localhost
[localhost]
must provide username

--

But i can finger this host anyway (without specifying username):

--

merahq: {2} telnet localhost finger
Trying 127.0.0.1...
Connected to localhost.
Escape character is '^]'.
-l
Login: dv                               Name: Dmitry Valdov
Directory: /usr/u/dv                    Shell: /bin/csh
On since Sat Oct 14 20:09 (MSK) on ttyp0 (messages off) from gw09
No Mail.
Mail forwarded to: dv@xkis.nnov.su
No Plan.
Connection closed by foreign host.

-- 

Is this true? 
This works on all version from 2.0 to 2.2-current.


Dmitry.

PS. Sorry for my poor english..



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?199510141719.UAA20828>