bugtraq - Re: Solaris finger bug

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [day] [month] [year] [list]

Message-id: <46AA4518.8000408@Sun.COM>
Date: Fri, 27 Jul 2007 21:18:48 +0200
From: Joep Vesseur <Joep.Vesseur@....COM>
To: Jim Mellander <jmellander@....gov>
Cc: bugtraq@...urityfocus.com
Subject: Re: Solaris finger bug

Jim Mellander wrote:
> Does anyone know of other platforms which exhibit this odd behavior?

No, I think this is a Solaris-particular bug. I'd suggest to block
finger requests to these old[1] hosts, or turn off the finger daemon
alltogether...

Joep

[1] After all, Solaris 7  is from '98...