Path: utzoo!utgpu!news-server.csri.toronto.edu!cs.utexas.edu!uunet!mcsun!ukc!slxsys!jpp
From: jpp@specialix.co.uk (John Pettitt)
Newsgroups: comp.unix.sysv386
Subject: Re: SCO Responds to security bugs (was: SCO UNIX C2 Security)
Message-ID: <1991Mar6.124913.2292@specialix.co.uk>
Date: 6 Mar 91 12:49:13 GMT
References: <14791@scorn.sco.COM> <1991Feb22.093441.8639@specialix.co.uk> <1991Feb23.020126.8064@robobar.co.uk> <92022@lll-winken.LLNL.GOV> <1991Mar1.003629.24581@ibmpcug.co.uk>
Organization: Specialix International, London
Lines: 25

ronald@ibmpcug.co.uk (Ronald Khoo) writes:
>casey@gauss.llnl.gov (Casey Leedom) writes:
>> [[Ad homin attacks on John deleted.]]
>Honestly!  They weren't attacks of any kind.  Maybe a gentle ribbing, and
>mostly just wanting to know exactly what John's position was.
>Besides, the point about the support contract was a serious question
>that I actually would have liked an answer to, though John didn't address it.
>That's his privilege.

Firstly our sco ES contract does not prohibit us from talking about
problems in released software (it does on beta but tha't quite
normal).

Secondly the bug in question is not related to rexecd as ronald suggests.
I am not going to be drawn into describing the bug however I will say
again:

	If you are using SCO 3.2.[01] with TCP/IP and NFS you need
	to install the security fixes !


-- 
John Pettitt, Specialix International, 
Email: jpp@specialix.com Tel +44 (0) 9323 54254 Fax +44 (0) 9323 52781
Disclaimer: Me, say that ?  Never, it's a forged posting !