inetd security hole?
Bob Heckel
BHeckel@excite.com
Fri Aug 4 14:04:00 GMT 2000
I just set up inetd-1.3.2-5p1 as a service on my W2K box. My
thanks to the Cygwin team. Great job on this piece. There
may, however, be a security hole for some people. I was
able to FTP from a remote Unix box to my Cygwin W2K box
simply by using user guest and password (enter). Had to
delete the Guest entry from /etc/passwd to close the hole.
I may not be configured properly and your system may be
different but I wanted to make sure no one is accidently
exposed to trouble. I checked the mailing list search
engine prior to posting this and didn't see any warnings regarding this
issue.
Bob Heckel
_______________________________________________________
Say Bye to Slow Internet!
http://www.home.com/xinbox/signup.html
--
Want to unsubscribe from this list?
Send a message to cygwin-unsubscribe@sourceware.cygnus.com
More information about the Cygwin
mailing list