Re: Sun libnsl lameness

it should be noted that ssh and sshd make use of insecure functions as
mentioned below.

[root_at_squig ~/work/ssh/ssh-1.2.25] nm sshd | egrep 'getnetname|getsecretkey'
[428] | 372268| 0|FUNC |GLOB |0 |UNDEF |getnetname
[527] | 372280| 0|FUNC |GLOB |0 |UNDEF |getsecretkey
[root_at_squig ~/work/ssh/ssh-1.2.25] nm ssh | grep getnetname
[416] | 356736| 0|FUNC |GLOB |0 |UNDEF |getnetname

George Clooney wrote:
> Functions we have found vulnerable:
>
> Vulnerable key functions
> ---------------------------------------------------
> getsecretkey () : Calls getkeys_nis ()
>
>
> Vulnerable RPC functions
> ----------------------------------------------------
> getnetname () : Calls host2netname ()

--
nicholas harteau
nrh_at_sfx.com