Bugtraq: Re: SunOS 4.1.4 fingerd

[eilon () aristo tau ac il (Eilon Gishri)]

> We use tcpd (tcp-wrappers) to block outside finger connections on a machine, but I
> tested it by going to a machine that didn't have wrappers installed and was able to
> use the above concatenation (user () hidden@free.machine) to look at the users online.
> So I still have to modify the source for the fingers on any machine that won't run
> wrappers (like IRIX).
>
> ------------------------------------------------------------------------------
> Patrick Ferguson - Systems Administrator                      patrick () dmv com
> DelMarVa OnLine! - Salisbury, MD
If you run pidentd on you machines you can block access to nobody () ALL,
guest () ALL, root () ALL for fingerd thus blocking chained finger (fingerd
is usually run using those users in /etc/inetd.conf).

--
                Eilon Gishri, Tel-Aviv University Computation Center
                Home 03-5078671
                E-mail: eilon () aristo tau ac il