Re: NetWare Changing IP Port 524

From: Gregory Maxwell (greg@linuxpower.cx)
Date: Tue Nov 14 2000 - 20:56:29 EST


On Tue, Nov 14, 2000 at 01:29:31PM -0700, Jeff V. Merkey wrote:
> Hopefully, sanity will rule out here. I information being leaked from
> what I reviewed was the ability for a hacker to exploit port 524 and use
> it
> to obtain a local copy of the entire routing table for other IP servers
> INSIDE an organization (which is a huge hole).

That is obviously the hole as it is clearly not the intended function of the
service. However, anyone who depends on the secrecy of their IP routing
tables or overall network topology for security has bigger problems then
some stupid Netware bug.
-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@vger.kernel.org
Please read the FAQ at http://www.tux.org/lkml/



This archive was generated by hypermail 2b29 : Wed Nov 15 2000 - 21:00:27 EST