Re: Solaris telnet vuln solutions digest and network risks

2007-02-15 Thread Joseph S D Yao
On Tue, Feb 13, 2007 at 07:22:51PM -0600, Gadi Evron wrote: ... > 2. If you haven't already, I strongly recommend checking your network for > machines running telnet, and more specifcially, vulnerable to this > particular issue. NO. The telnet DAEMON. NOT telnet. *sigh* Too many releases con

Re: Solaris telnet vuln solutions digest and network risks

2007-02-14 Thread Joe Abley
On 14-Feb-2007, at 09:59, MARLON BORBA wrote: I agree with Gadi. Everything which affects Internet stability (e.g. DNS denial-of-service attacks) deserves attention of network operators. IMHO it's time to think about a new NANOG AUP. The NANOG charter says that the people responsible for

Re: Solaris telnet vuln solutions digest and network risks

2007-02-14 Thread MARLON BORBA
I agree with Gadi. Everything which affects Internet stability (e.g. DNS denial-of-service attacks) deserves attention of network operators. IMHO it's time to think about a new NANOG AUP. If, as Gadi says, "not all of us can handle all that an ISP would care", all of us (network operators, sysadm

Re: Solaris telnet vuln solutions digest and network risks

2007-02-14 Thread Gadi Evron
On Wed, 14 Feb 2007, Robert E. Seastrom wrote: > > > <[EMAIL PROTECTED]> writes: > > > Do you know of any network operators who have no Solaris boxes at all > > used in the management of some part of their network? Seems to me that > > it is very common for network operators to use Solaris boxe

Re: Solaris telnet vuln solutions digest and network risks

2007-02-14 Thread Robert E. Seastrom
<[EMAIL PROTECTED]> writes: > Do you know of any network operators who have no Solaris boxes at all > used in the management of some part of their network? Seems to me that > it is very common for network operators to use Solaris boxes to manage > their networks. And while they may have ACLs to

RE: Solaris telnet vuln solutions digest and network risks

2007-02-14 Thread michael.dillon
> Subject: Re: Solaris telnet vuln solutions digest and network risks > This post appears to have been written for another mailing > list (where it is > probably on-topic). Why did you repost it to NANOG-L? Do you know of any network operators who have no Solaris boxes at all

Re: Solaris telnet vuln solutions digest and network risks

2007-02-13 Thread Gadi Evron
On Tue, 13 Feb 2007, Albert Meyer wrote: > Gadi Evron wrote: > > A couple of updates and a summary digest of useful information shared from > > all around on this vulnerability, for those of us trying to make sense of > > what it means to our networks: > > Gadi, > > This post appears to have bee

Re: Solaris telnet vuln solutions digest and network risks

2007-02-13 Thread Albert Meyer
Gadi Evron wrote: A couple of updates and a summary digest of useful information shared from all around on this vulnerability, for those of us trying to make sense of what it means to our networks: Gadi, This post appears to have been written for another mailing list (where it is probably on

Solaris telnet vuln solutions digest and network risks

2007-02-13 Thread Gadi Evron
A couple of updates and a summary digest of useful information shared from all around on this vulnerability, for those of us trying to make sense of what it means to our networks: 1. Sun released a patch (although it is not a final one). It can be found on their site ( http://sunsolve.sun.com/tpa