Home page logo
/

bugtraq logo Bugtraq mailing list archives

Re: SunOS 4.1.4 fingerd
From: eilon () aristo tau ac il (Eilon Gishri)
Date: Tue, 21 May 1996 11:43:54 +0300



We use tcpd (tcp-wrappers) to block outside finger connections on a machine, but I
tested it by going to a machine that didn't have wrappers installed and was able to
use the above concatenation (user () hidden@free.machine) to look at the users online.
So I still have to modify the source for the fingers on any machine that won't run
wrappers (like IRIX).

------------------------------------------------------------------------------
Patrick Ferguson - Systems Administrator                      patrick () dmv com
DelMarVa OnLine! - Salisbury, MD

If you run pidentd on you machines you can block access to nobody () ALL,
guest () ALL, root () ALL for fingerd thus blocking chained finger (fingerd
is usually run using those users in /etc/inetd.conf).

--
                Eilon Gishri, Tel-Aviv University Computation Center
                Home 03-5078671
                E-mail: eilon () aristo tau ac il



  By Date           By Thread  

Current thread:
[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]