Bugtraq mailing list archives

Re: Solaris 2.6, 7, 8

From: "Christopher X. Candreva" <chris () westnet com>
Date: Wed, 2 Oct 2002 14:04:13 -0400 (EDT)

On Wed, 2 Oct 2002, Dave Ahmad wrote:

I suggest that everyone here who still uses telnet disable it immediately.


 . . or install the latest Recomended patch cluster, which you should have
done anyway.

These may be fixes for this vulnerablity, however they apply to telnetd
and this vulnerability has to be in login.


There are patches for /bin/login as well  On Solaris 8 it's 111085-02, dated
Dec 13 2001:

I haven't been able to reproduce this on a system with 111085-02 installed.


==========================================================
Chris Candreva  -- chris () westnet com -- (914) 967-7816
WestNet Internet Services of Westchester
http://www.westnet.com/

Current thread:

Solaris 2.6, 7, 8 Jonathan S (Oct 02)
- Re: Solaris 2.6, 7, 8 Dave Ahmad (Oct 02)
  - Re: Solaris 2.6, 7, 8 buzheng (Oct 02)
    - Re: Solaris 2.6, 7, 8 tb0b (Oct 03)
    - Re: Solaris 2.6, 7, 8 Marco Ivaldi (Oct 03)
    - Re: Solaris 2.6, 7, 8 Sebastian (Oct 05)
  - Re: Solaris 2.6, 7, 8 Christopher X. Candreva (Oct 02)
  - Re: Solaris 2.6, 7, 8 Gert-Jan Hagenaars (Oct 03)
- Re: Solaris 2.6, 7, 8 Ido Dubrawsky (Oct 03)
- Re: Solaris 2.6, 7, 8 Ramon Kagan (Oct 03)
  - Re: Solaris 2.6, 7, 8 Roy Kidder (Oct 03)
- Re: Solaris 2.6, 7, 8 Ramon Kagan (Oct 03)
- <Possible follow-ups>
- RE: Solaris 2.6, 7, 8 Sinan Eren (Oct 02)
- Re: Solaris 2.6, 7, 8 Dan Diamond (Oct 03)
- RE: Solaris 2.6, 7, 8 Morgan (Oct 04)