[8888] in bugtraq
Re: Breeze Network Server remote reboot and other bogosity.
daemon@ATHENA.MIT.EDU (Mike Pelley)
Fri Jan 1 15:36:47 1999
Date: Thu, 31 Dec 1998 19:09:45 -0500
Reply-To: Mike Pelley <mike@PELLEY.COM>
From: Mike Pelley <mike@PELLEY.COM>
To: BUGTRAQ@NETSPACE.ORG
Hello Bugtraq.
I work for WindDance Networks Corporation. While developing our Breeze
Network server mentioned in a previous message, we were interested in having
some 'friendlies' try out the Breeze and offer suggestions regarding
additional potential functionality requirements for their clients and
others. As our current president, Rainer Paduch, was previously the
president and vice-chairman of iStar before it was acquired by PSINet, he
asked if they would take a look at our prototype. They accepted, so I made
an image of one of our development machines for them to check out and
recommend features/changes.
A few weeks later Mr. Vardomskiy (Stany) called me and mentioned some
security concerns, which he has outlined in his previous message. I
explained that the version of the Breeze he received was not intended for
customers, and most of the issues he mentioned were well known and the way
they were because this was an image of my development machine and not a
production machine. I explained that we had some things to work on, and
that we had a security review planned after we had ensured that the machine
was stable and functional.
I am distressed that Mr. Vardomskiy has misrepresented the status of the
machine he received and I do not understand why he was confused after our
conversation on the phone. We have since created a beta release image of
the Breeze. I did not promise to contact Mr. Vardomskiy, but I did mention
that we would soon have a newer load available and would be happy to send it
over if PSINet had time to evaluate it.
If anyone has any specific questions about the Breeze or the issues
mentioned before please contact me anytime.
Mike Pelley
System Designer
WindDance Networks
(613) 728-1700 x 15
mikep@winddance.net
