Bugtraq mailing list archives

Re: CERT Advisory CA-97.23 - rdist

From: garbanzo () HOOKED NET (Alex)
Date: Tue, 16 Sep 1997 19:18:18 -0700


On Tue, 16 Sep 1997, Perry E. Metzger wrote:

CERT* Advisory CA-97.23
Original issue date: September 16, 1997
Last revised: --

Topic: Buffer Overflow Problem in rdist


OpenBSD does not have this problem.  None of the versions of rdist
distributed are setuid or setgid.


NetBSD no longer has suid versions of rdist either.


Neither does FreeBSD, hence only _old_ versions of FreeBSD that probably
have suid rdist were listed.

- alex

Current thread:

CERT Advisory CA-97.23 - rdist Aleph One (Sep 16)
- Re: CERT Advisory CA-97.23 - rdist Theo de Raadt (Sep 16)
  - Fake ps detection program (system V and /proc enabled machines) Duncan Simpson (Sep 16)
    - Java/JavaScript DoS Ian McKellar (Sep 16)
    - Re: Fake ps detection program (system V and /proc enabled David Luyer (Sep 16)
  - Re: CERT Advisory CA-97.23 - rdist Perry E. Metzger (Sep 16)
    - Re: CERT Advisory CA-97.23 - rdist Alex (Sep 16)
    - [IPD] Internet Probe Droid balif (Sep 16)
    - Re: [IPD] Internet Probe Droid Keith A. Watson (Sep 18)
    - Instresting practises of Oracle [Oracle Webserver] hurtta+zz () OZONE FMI FI (Sep 18)
    - Redir games with ARP and ICMP Yuri Volobuev (Sep 19)
    - Re: Redir games with ARP and ICMP Alan Cox (Sep 19)
    - Re: Redir games with ARP and ICMP Ulrich Flegel (Sep 20)
    - Blind Spoofing System Crasher (Sep 20)
    - SunOS4.1.X sockopt panic HAKNER JEFF (Sep 20)
    - Re: Redir games with ARP and ICMP John Goerzen (Sep 22)
    - Re: CERT Advisory CA-97.23 - rdist Simon Karpen (Sep 16)

(Thread continues...)