Subject: Re: telnetd/shared-libraries bug fixed in 1.1 ?
To: Netbsd Mailing List <netbsd@vu.com>
From: Jason Thorpe <thorpej@nas.nasa.gov>
List: netbsd-bugs
Date: 12/07/1995 19:03:35
On Thu, 7 Dec 1995 19:21:56 -0700 (MST)
Netbsd Mailing List <netbsd@vu.com> wrote:
> i came across a note in the bugtraq mailing list that uncovered a security
> flaw in various implementations of telnetd using shared libraries. from
> what i can tell, it appears to exist in 1.1, which is strange because i
> thought it was fixed quite a while ago.
> if readers require the article, i can find it and post/mail.
I think there was a CERT advisory, if that's what you're referring to.
It certainly doesn't appear to exist on my systems ... below is a
transcript I _just_ ran to check. The version says 1.0A, but that's
because through the release cycle, I continued using the development
trunk on this particular system.
--------------------------------------------------------------------------
Jason R. Thorpe thorpej@nas.nasa.gov
NASA Ames Research Center Home: 408.866.1912
NAS: M/S 258-6 Work: 415.604.0935
Moffett Field, CA 94035 Pager: 415.428.6939
-----snip-----
Script started on Thu Dec 7 19:06:47 1995
antie (thorpej) ~ 101% uname -a
NetBSD antie 1.0A NetBSD 1.0A (ANTIE) #391: Tue Nov 21 16:35:24 PST 1995 thorpej@antie:/work/netbsd/src/sys/arch/i386/compile/ANTIE i386
antie (thorpej) ~ 102% setenv LD_LIBRARY_PATH /usr/lib:/usr/local/lib
antie (thorpej) ~ 103% telnet localhost
Trying 127.0.0.1...
Connected to localhost.nas.nasa.gov.
Escape character is '^]'.
------------------------------------------------------------------------------
You are connected to a U.S. government computer system. Any unauthorized
attempt to gain access to this system may subject you to fine or imprisonment.
------------------------------------------------------------------------------
NetBSD/i386 (antie) (ttyp3)
login: thorpej
Password:
Last login: Thu Dec 7 19:06:09 from localhost
Copyright (c) 1980, 1983, 1986, 1988, 1990, 1991, 1993, 1994
The Regents of the University of California. All rights reserved.
NetBSD 1.0A (ANTIE) #391: Tue Nov 21 16:35:24 PST 1995
Terminal type? [xterms]
Display? [lestat.nas.nasa.gov:0]
7:07PM up 16 days, 2:31, 5 users, load averages: 0.28, 0.15, 0.10
users: thorpej
antie (thorpej) ~ 101% echo $LD_LIBRARY_PATH
LD_LIBRARY_PATH: Undefined variable.
antie (thorpej) ~ 102% exit
logout
Connection closed by foreign host.
antie (thorpej) ~ 104% exit
exit
Script done on Thu Dec 7 19:07:51 1995