[6125] in Kerberos
Re: Telnet vulnerability--shared library loading
daemon@ATHENA.MIT.EDU (Lorrie Wood)
Sat Nov 4 07:46:26 1995
To: kerberos@MIT.EDU
Date: 3 Nov 1995 10:45:49 GMT
From: lorrie@mellers1.psych.berkeley.edu (Lorrie Wood)
In article <47agde$ibn@tkhut.sojourn.com>,
Kristopher Kortright <lloth@sorron.sojourn.com> wrote:
>
> At the risk of sounding like an idiot, IS there indeed a fix for the
>Slackware distribution? If so, where is it or which of the others should
>I use on my network.
Slackware *IS* vulnerable -- I spoke with the author. There's a
fixed in.telnetd available at:
ftp://ftp.cymru.net/pub/linux/security/in.telnetd.gz
The correct placement for this, once downloaded, is
/usr/sbin/in.telnetd in Slackware 3.0. Dunno about other dists or indeed
other versions of Slackware.
-- Lorrie