Date: Thu, 26 Jul 2001 04:01:15 -0700 From: Kris Kennaway <kris@obsecurity.org> To: Ted Mittelstaedt <tedm@toybox.placo.com> Cc: Kris Kennaway <kris@obsecurity.org>, Shawn Ramsey <shawn@megadeth.org>, questions@FreeBSD.ORG Subject: Re: telnetd problem? Message-ID: <20010726040113.A41239@xor.obsecurity.org> In-Reply-To: <00b401c115b4$b78dbaa0$1401a8c0@tedm.placo.com>; from tedm@toybox.placo.com on Thu, Jul 26, 2001 at 02:24:06AM -0700 References: <20010726004017.A42068@xor.obsecurity.org> <00b401c115b4$b78dbaa0$1401a8c0@tedm.placo.com>
next in thread | previous in thread | raw e-mail | index | archive | help
--WIyZ46R2i8wDzkSu Content-Type: text/plain; charset=us-ascii Content-Disposition: inline On Thu, Jul 26, 2001 at 02:24:06AM -0700, Ted Mittelstaedt wrote: > That's a bandaid. He stated that the problem wasn't happening until > he updated to the new code, so obviously a patch they put into the > telnetd broke something. No, Ted, that's not obvious. Exploitation of this problem has become much more widespread since the public distribution of the exploit code yesterday. The poster hasn't shown that there's a problem inconsistent with lots of people throwing data at his telnetd trying to exploit it. Kris --WIyZ46R2i8wDzkSu Content-Type: application/pgp-signature Content-Disposition: inline -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.0.6 (FreeBSD) Comment: For info see http://www.gnupg.org iD8DBQE7X/h4Wry0BWjoQKURAkaiAKDFB73BO9U4yV22W0vnBWW5bTZrpwCgkL2O PcRtyhHOaRt5IPoa8+vWy3s= =kduP -----END PGP SIGNATURE----- --WIyZ46R2i8wDzkSu-- To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20010726040113.A41239>