Nmap Security Scanner
*Intro
*Ref Guide
*Install Guide
*Download
*Changelog
*Book
*Docs
Security Lists
*Nmap Hackers
*Nmap Dev
*Bugtraq
*Full Disclosure
*Pen Test
*Basics
*More
Security Tools
*Pass crackers
*Sniffers
*Vuln Scanners
*Web scanners
*Wireless
*Exploitation
*Packet crafters
*More
Site News
Site Search:
Exploit World
Advertising
About/Contact
Credits
Sponsors:
edgeos



Bugtraq: Re: SunOS 4.1.4 fingerd

Re: SunOS 4.1.4 fingerd

From: Eilon Gishri <eilon_at_aristo.tau.ac.il>
Date: Tue, 21 May 1996 11:43:54 +0300

>
> We use tcpd (tcp-wrappers) to block outside finger connections on a machine, but I
> tested it by going to a machine that didn't have wrappers installed and was able to
> use the above concatenation (user_at_hidden@free.machine) to look at the users online.
> So I still have to modify the source for the fingers on any machine that won't run
> wrappers (like IRIX).
>
> ------------------------------------------------------------------------------
> Patrick Ferguson - Systems Administrator patrick_at_dmv.com
> DelMarVa OnLine! - Salisbury, MD
>
If you run pidentd on you machines you can block access to nobody_at_ALL,
guest_at_ALL, root_at_ALL for fingerd thus blocking chained finger (fingerd
is usually run using those users in /etc/inetd.conf).

--
                Eilon Gishri, Tel-Aviv University Computation Center
                Home 03-5078671
                E-mail: eilon_at_aristo.tau.ac.il
Received on May 21 1996
[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]
edgeos