[2498] in bugtraq

home help back first fref pref prev next nref lref last post

Re: BoS: bind() Security Problems

daemon@ATHENA.MIT.EDU (Pug)
Thu Feb 1 18:09:51 1996

Date:         Thu, 1 Feb 1996 12:32:40 -0600
Reply-To: Bugtraq List <BUGTRAQ@CRIMELAB.COM>
From: Pug <pug@arlut.utexas.edu>
X-To:         bugtraq@CRIMELAB.COM
To: Multiple recipients of list BUGTRAQ <BUGTRAQ@CRIMELAB.COM>
In-Reply-To:  <199601311139.LAA21965@gizmo.lut.ac.uk> from "Martin Hamilton" at
              Jan 31, 96 11:39:32 am

> | Affected Operating System: Linux, SunOS, FreeBSD, BSDI, Ultrix
> | Probably others.
> FWIW: I seem to have been able to exploit it (for test purposes ;-)
> on HP/UX, IRIX and OSF/1 - but not under Solaris.  Boy, this is
> turning out to be a fun day...

I was able to reproduce this (or atleast a problem) on Solaris 2.4. It
certainly makes things go strange while it's running (for the NFS
clients) since the wrong program is swallowing the packets. (Guess I
shouldn't have ran it on my NFS server. *grin*)

Note: I was not able to reproduce it with the NSkit 1.0 yppasswdd though.
I didn't try any other ports.

--
Richard Bainter          Mundanely     |    OS Specialist         - OMG/CSD
Pug                      Generally     |    Applied Research Labs - U.Texas
   pug@arlut.utexas.edu     |     pug@eden.com     |     {any user}@pug.net
Note: The views may not reflect my employers, or even my own for that matter.

home help back first fref pref prev next nref lref last post