I just read an announcement from InfoWorld that an exploit has been
discovered in the FTP distributed with Solaris. The article (at
http://www.infoworld.com/articles/hn/xml/01/04/10/010410hnhole2.xml?0410tupm
) quotes Sun spokesman Russ Castronovo as saying: "We have [identified] it,
we have been able to replicate it, we've developed a patch already, and
we're in the process of testing and backporting it to other versions of
Solaris," Castronovo said Tuesday. Sun was notified of the problem by PGP on
March 28, Castronovo said.

I've seen nothing about this exploit anywhere else. In particular, both this
e-list and security-alertsun.com have been silent on this issue. So, is
this a genuine problem, or just some media hype?

Yours,
Michael
-----
Michael C. Tucker | Java Developer
Energy Graphics, Inc. | Software Engineer
mtuckerenergygraphics.com | Sun Certified System Engineer

It's the action, not the fruit of the action that's important. You have
to do the right thing... You may never know what results come from your
action. But if you do nothing, there will be no result. (Gandhi)

• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]