Re: (PM) SECURITY PROBLEM.

John Nowack (john@tremont.dpc.net)
Tue, 7 Jul 1998 17:26:53 -0500

>>> So, the next person to telnet to that portmaster, and
>>> sit there and wait, will see all the debugging information
>>> streamed to their screen, WITHOUT LOGGING IN.
This has been mentioned before in the list. It seems to come up every
now and then. Somewhere in the docs or the release note or web-site it
used to be mentioned to always reset the console or the next person to
telnet in *may* see the debug output. I guess it attaches the debug
output to one of the 4 telnet sessions and if you hit the one that has
the console attached to it, it starts spewing at you.

At any rate, I know Livingston knows about this, as they have warned about
it before.

John

--
John Nowack
john@dpc.net
DPConsultants, Inc.
Sys Admin -- dpc.net
309-925-2451
-
To unsubscribe, email 'majordomo@livingston.com' with
'unsubscribe portmaster-users' in the body of the message.
Searchable list archive: <URL:http://www.livingston.com/Tech/archive/>