[7564] in bugtraq
Re: Solaris 2.5.1/2.6 fingerd bug
daemon@ATHENA.MIT.EDU (Matthew R. Potter)
Fri Aug 7 16:49:55 1998
Date: Thu, 6 Aug 1998 14:59:36 -0400
Reply-To: "Matthew R. Potter" <mpotter@KMFDM.SYSTEM.GIP.NET>
From: "Matthew R. Potter" <mpotter@KMFDM.SYSTEM.GIP.NET>
To: BUGTRAQ@NETSPACE.ORG
In-Reply-To: <199808061829.UAA02318@romulus>
>It's not new nor reintroduced. It's been in fingerd forever.
There were patches for 2.X=3,4,5 that stoped the bouncing of finger. Most
unixes have gotten rid of the "bounce" feature, So what if it's been in
fingerd forever, it's not a good thing, then again fingerd gives away too
much info. But you can use this to get info about parts of the network you
shouldnt normally see.
Matt
