Re: [BLACKLIST] [Full-disclosure] Solaris telnet vulnberability - how many on yournetwork?

Gadi,

> [...]
> One note: although it could just as well be a bug, who says it was not a
> backdoor in the early 90's?
>
> Also, I understand this does not work on older Solaris/SunOS systems
> (anyone can verify?)

I can. It is not present in anything before Solaris 10.

> which adds to my personal interest in the
> possibility. I refuse to believe someone is that funny/sad.

Not sure what you mean here... You don't believe this is a (very
unfortunate) accident?

 From where I stand (pretty close to the fire) this is pretty much
what it looks like (an extended multi-file, multi-entrance-point
change with unforseen and unnoticed interdependencies).

Joep
Received on Feb 15 2007