[Search for users] [Overall Top Noters] [List of all Conferences] [Download this site]

Conference turris::digital_unix

Title:DIGITAL UNIX(FORMERLY KNOWN AS DEC OSF/1)
Notice:Welcome to the Digital UNIX Conference
Moderator:SMURF::DENHAM
Created:Thu Mar 16 1995
Last Modified:Fri Jun 06 1997
Last Successful Update:Fri Jun 06 1997
Number of topics:10068
Total number of notes:35879

8620.0. "CERT advisory CA-97.04 - talkd Vulnerability: Digital UNIX? " by NETRIX::"[email protected]" (Jarkko Hietaniemi) Tue Jan 28 1997 10:43

Where do we stand? Buffer overflow attack, this time on talkd
using DNS spoofing, allows one to run commands as root from
the network. Are we affected? Apparently by the time the Advisory
went out Digital had not replied, neither 'yes, here is a patch'
nor 'no, whatdidya think?'.

The real CERT site is not responding, here is a copy:
http://www.beckman.uiuc.edu/groups/biss/VirtualLibrary/mail/cert/

If this is not the right forum to ask, please enlighten me.

-- 
Jarkko Hietaniemi Digital/Finland MCS/OSS DTN 879-4738
[email protected]   +358-(0)9-434 4738

[Posted by WWW Notes gateway]
T.RTitleUserPersonal
Name
DateLines