home *** CD-ROM | disk | FTP | other *** search
- Newsgroups: comp.security.misc
- Path: sparky!uunet!wupost!usc!news.service.uci.edu!unogate!mvb.saic.com!network.ucsd.edu!news!avalon.nwc.navy.mil!archimedes!dejesus
- From: dejesus@archimedes.nwc.navy.mil (Francisco X DeJesus)
- Subject: Re: They forget rusers, was Re: reasons for disable fingerd
- Message-ID: <Bz3y3E.Jyu@avalon.nwc.navy.mil>
- Sender: usenet@avalon.nwc.navy.mil (NWC News Admin)
- Organization: Science Applications International Corp.
- References: <n051Hgpb2b@atlantis.psu.edu> <1992Dec2.162425.27877@telebit.com> <1992Dec9.173938.8706@nntp.hut.fi>
- Date: Fri, 11 Dec 1992 18:30:50 GMT
- Lines: 24
-
- In article <1992Dec9.173938.8706@nntp.hut.fi> jkp@cs.HUT.FI (Jyrki Kuoppala) writes:
- >In article <1992Dec2.162425.27877@telebit.com>, bjork@telebit (Steven Bjork) writes:
- >>Those that disable finger often forget that nice rpc package
- >>originating with a Big workstation vendor.
- >
- >and enabled by default on OS's by a couple of other vendors.
- >
- >>So even if they
- >>disable finger, crackers could just run rusers.
-
- Still, doesn't rusers (and rup, rlogin, rsh, etc) require a hostname? If
- they don't work with IP addresses (they way finger/telnet can) then their
- use is restricted if the machine you are trying to "probe" isn't registered.
- Anyone know of a way around this (other than making a local entry in your
- hosts file)?
-
-
-
-
- --
- Francisco X DeJesus ----- S A I C ----- dejesus@chinalake.navy.mil
- ------------------------------------------------------------------------------
- * disclaimer: Opinions expressed here are mine. Typos and errors are yours *
- "Duck Season!" "Rabbit Season!" "...rabbit season." "It's Duck Season! SHOOT!"
-