Re: portmapper dangers

Here's a suggestion. Why not pass on my comments to "deep throat" and
ask for his or her comments?

The claimed holes (set/unset from outside, unprivileged set/unset of
privileged ports) are already adressed in version 1 of my portmapper.

This makes me very curious about "deep throat"'s evidence for holes
in my program. Especially when they are announced on a public forum.

If there is a problem in my software I will fix it. I released this
program to protect my university's systems, and I have no desire to
hide any vulnerabilities under the rug.

        Wietse
Received on Jul 05 1996