Re: (PM) SECURITY PROBLEM.

John Nowack (john@tremont.dpc.net)
Wed, 8 Jul 1998 09:26:43 -0500

>WOAH! I just reproduced it on 3.7.2. I telnettetted BACK in, and before I
>even typed !root to log in, I was getting debug info. Is that what youare
>talking about?
>
That's it. The debug output seems to be attached to the physical telnet
session (1-4). The next person who telnets to the PM (2 or 3, both have
exibited this for years, it's been mentioned before) and gets the same
telnet session get the debug output. I don't know if it's a bug or not.
The first place I heard about it was either in a release note or a technote
so I know that this has been known about for a while, it just hasn't come
up here for a year or more.

John

--
John Nowack
john@dpc.net
DPConsultants, Inc.
Sys Admin -- dpc.net
309-925-2451
-
To unsubscribe, email 'majordomo@livingston.com' with
'unsubscribe portmaster-users' in the body of the message.
Searchable list archive: <URL:http://www.livingston.com/Tech/archive/>