Bugtraq mailing list archives
Re: SunOS 4.1.4 fingerd
From: eilon () aristo tau ac il (Eilon Gishri)
Date: Tue, 21 May 1996 11:43:54 +0300
We use tcpd (tcp-wrappers) to block outside finger connections on a machine, but I tested it by going to a machine that didn't have wrappers installed and was able to use the above concatenation (user@hidden@free.machine) to look at the users online. So I still have to modify the source for the fingers on any machine that won't run wrappers (like IRIX). ------------------------------------------------------------------------------ Patrick Ferguson - Systems Administrator patrick () dmv com DelMarVa OnLine! - Salisbury, MD
If you run pidentd on you machines you can block access to nobody@ALL, guest@ALL, root@ALL for fingerd thus blocking chained finger (fingerd is usually run using those users in /etc/inetd.conf). -- Eilon Gishri, Tel-Aviv University Computation Center Home 03-5078671 E-mail: eilon () aristo tau ac il
Current thread:
- Re: SunOS 4.1.4 fingerd, (continued)
- Re: SunOS 4.1.4 fingerd Christopher X. Candreva (May 16)
- Re: SunOS 4.1.4 fingerd Niko Makila (May 16)
- Re: SunOS 4.1.4 fingerd Steve Coleman - SEWP (May 17)
- Re: SunOS 4.1.4 fingerd bitblt () bitblt resnet cornell edu (May 17)
- Re: SunOS 4.1.4 fingerd Yiorgos Adamopoulos (May 17)
- Re: SunOS 4.1.4 fingerd David B. Vanderpool (May 17)
- Re: SunOS 4.1.4 fingerd Taner Halicioglu (May 17)
- Re: SunOS 4.1.4 fingerd Craig Raskin (May 17)
- Re: SunOS 4.1.4 fingerd Ed Arnold (May 16)
- Re: SunOS 4.1.4 fingerd Patrick Ferguson (May 20)
- Re: SunOS 4.1.4 fingerd Eilon Gishri (May 21)
- Re: SunOS 4.1.4 fingerd Alan Brown (May 22)
- CERT Vendor-Initiated Bulletin VB-96.06 - FreeBSD CERT Bulletin (May 20)
- Re: SunOS 4.1.4 fingerd invalid opcode (May 16)
- Re: TCP SYN probe detection tool available Henri Karrenbeld (May 16)
- Re: TCP SYN probe detection tool available Brian Mitchell (May 16)
- Re: TCP SYN probe detection tool available Mike Neuman (May 16)
- Re: TCP SYN probe detection tool available Darren Reed (May 26)
- Re: TCP SYN probe detection tool available JaDe (May 16)