From owner-freebsd-ports@FreeBSD.ORG Thu Dec 16 06:40:57 2004 Return-Path: Delivered-To: freebsd-ports@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 51C1E16A4CE for ; Thu, 16 Dec 2004 06:40:57 +0000 (GMT) Received: from buexe.b-5.de (buexe.b-5.de [80.148.32.30]) by mx1.FreeBSD.org (Postfix) with ESMTP id D5B3843D2F for ; Thu, 16 Dec 2004 06:40:55 +0000 (GMT) (envelope-from lupe@lupe-christoph.de) Received: from antalya.lupe-christoph.de (antalya.lupe-christoph.de [172.17.0.9])iBG6er8g002247 for ; Thu, 16 Dec 2004 07:40:54 +0100 Received: from localhost (localhost [127.0.0.1]) by antalya.lupe-christoph.de (Postfix) with ESMTP id A477EB885 for ; Thu, 16 Dec 2004 07:40:48 +0100 (CET) Received: from antalya.lupe-christoph.de ([127.0.0.1]) by localhost (antalya [127.0.0.1]) (amavisd-new, port 10024) with LMTP id 17292-08-2 for ; Thu, 16 Dec 2004 07:40:42 +0100 (CET) Received: by antalya.lupe-christoph.de (Postfix, from userid 1000) id ABDB7B886; Thu, 16 Dec 2004 07:40:42 +0100 (CET) Date: Thu, 16 Dec 2004 07:40:42 +0100 To: freebsd-ports@freebsd.org Message-ID: <20041216064042.GE10225@lupe-christoph.de> References: <20041216010359.51904.qmail@web51604.mail.yahoo.com> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <20041216010359.51904.qmail@web51604.mail.yahoo.com> User-Agent: Mutt/1.5.6+20040907i From: lupe@lupe-christoph.de (Lupe Christoph) X-Virus-Scanned: by amavisd-new-20030616-p10 (Debian) at lupe-christoph.de Subject: Re: Security Exploits found in FreeBSD 4.10's ports tree. X-BeenThere: freebsd-ports@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list List-Id: Porting software to FreeBSD List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 16 Dec 2004 06:40:57 -0000 On Wednesday, 2004-12-15 at 17:03:59 -0800, Pedro F. Giffuni wrote: > This made it to Slashdot today, I can't find anything resembling this on Slashdot. Can you please provide a link to the article? > but what they didn't mention is that the > xploits were found in FreeBSD 4.10's ports tree (at least the few that I've > checked): > http://tigger.uic.edu/~jlongs2/holes/ A traceroute to tigger.uic.edu fails after 31-35.gw.uic.edu (128.248.246.174). Lupe Christoph -- | lupe@lupe-christoph.de | http://www.lupe-christoph.de/ | | "... putting a mail server on the Internet without filtering is like | | covering yourself with barbecue sauce and breaking into the Charity | | Home for Badgers with Rabies. Michael Lucas |