bugtraq - Re: Solaris telnet vulnberability

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <Pine.LNX.4.21.0702131506370.10319-100000@linuxbox.org>
Date: Tue, 13 Feb 2007 15:08:11 -0600 (CST)
From: Gadi Evron <ge@...uxbox.org>
To: Casper.Dik@....COM
Cc: Michal Zalewski <lcamtuf@...ne.ids.pl>,
	Oliver Friedrichs <oliver_friedrichs@...antec.com>,
	bugtraq@...urityfocus.com, full-disclosure@...ts.grok.org.uk
Subject: Re: Solaris telnet vulnberability - how many on your network? 

On Tue, 13 Feb 2007 Casper.Dik@....COM wrote:
> 
> >Yeah, a backdoor is a remote possibility. But it's also an arbitrary and
> >needlessly complex one. Maybe it's a nefarious plot by our UFO-appointed
> >shadow government, but chances are, it's not (they have better things to
> >do today).
> 
> And one which was too easy to discover; real back doors are better
> masquared as buffer overflows you might not chance upon.

We all agree it is not a very likely possibility, but I wouldn't rule it
out completely just yet until more information from Sun becomes
available.

There are a lot more relevant issues to discuss here regarding this
vulnerability, however, and we can move on from that moot point for now.

Thanks for your help and Sun's, Casper, but we would all like more
information.

> Casper
> 

	Gadi.