[31457] in bugtraq
Re: 11 years of inetd default insecurity?
daemon@ATHENA.MIT.EDU (Thamer Al-Harbash)
Mon Sep 8 13:29:06 2003
Date: Sun, 7 Sep 2003 21:46:28 -0400 (EDT)
From: Thamer Al-Harbash <tmh@whitefang.com>
To: 3APA3A <3APA3A@SECURITY.NNOV.RU>
Cc: bugtraq@securityfocus.com
In-Reply-To: <434148437.20030906180822@SECURITY.NNOV.RU>
Message-ID: <Pine.BSF.4.51.0309072145220.54030@helena.whitefang.com>
MIME-Version: 1.0
Content-Type: TEXT/PLAIN; charset=US-ASCII
On Sat, 6 Sep 2003, 3APA3A wrote:
> Dear bugtraq@securityfocus.com,
>
> Well, we all blame Microsoft in insecure default configuration... Isn't
> it time to clean outdated code in Unix?
This has been a known problem for quite a while. In fact
D. J. Bernstein already solved it with tcpserver:
http://cr.yp.to/ucspi-tcp.html
If you look at the bottom he points out pretty much what you
pointed out.
--
Thamer Al-Harbash
GPG Key fingerprint: D7F3 1E3B F329 8DD5 FAE3 03B1 A663 E359 D686 AA1F
"HLAGHLHALUAG (KTHANX)"
