Re: (PM) SECURITY PROBLEM.

Rick Smith (rsmith@nac.net)
Tue, 7 Jul 1998 16:52:19 -0400 (EDT)

it is in fact the case.
the connection does not clear. I believe you need to
hit the same telnet port for it to happen, but it does
happen.

On Tue, 7 Jul 1998, Jake Messinger wrote:

> On Tue, 7 Jul 1998, Rick Smith wrote:
>
> > The problem is, either the admin loses link, or quits
> > and either doesn't get a chance to type or forgets to
> > type 'reset cons' so that the debug info isn't displayed
> > anymore.
> >
> > So, the next person to telnet to that portmaster, and
> > sit there and wait, will see all the debugging information
> > streamed to their screen, WITHOUT LOGGING IN.
>
> This should not be the case. If the user is telnetting in, and looses the
> link, and another telnets in (over the ethernet port), they would come in
> as a different session. Is it not doing this?
>
> ~*-,._.,-*~'`^`'~*-,._.,-*~'`^`'~*-,._.,-*~'`^`'~*-,._.,-*~'`^`'~*-,._.,-*~
> Jake Messinger ph:713-772-6690 Lucent Dealer
> AMS, Inc. fx:713-774-3498 Medical Billing
> 8300 Bissonnet #400 jake@ams.com Internet Services
> Houston, Texas 77074 www.ams.com/~jake Business Management
> ~*-,._.,-*~'`^`'~*-,._.,-*~'`^`'~*-,._.,-*~'`^`'~*-,._.,-*~'`^`'~*-,._.,-*~
>
>

-
To unsubscribe, email 'majordomo@livingston.com' with
'unsubscribe portmaster-users' in the body of the message.
Searchable list archive: <URL:http://www.livingston.com/Tech/archive/>