Path: utzoo!utgpu!news-server.csri.toronto.edu!cs.utexas.edu!wuarchive!zaphod.mps.ohio-state.edu!uwm.edu!spool.mu.edu!cs.umn.edu!kksys!edgar!brainiac!jrc From: jrc@brainiac.mn.org (Jeffrey Comstock) Newsgroups: comp.binaries.ibm.pc.d Subject: Re: Warning for ProComm Users Message-ID: <1991Apr16.010424.22198@brainiac.mn.org> Date: 16 Apr 91 01:04:24 GMT References: <1991Apr11.122944.5139@bilver.uucp> <1991Apr12.002356.24990@comp.vuw.ac.nz> Organization: Advanced Kernel Research Geeks INC. Lines: 21 In article <1991Apr12.002356.24990@comp.vuw.ac.nz> Conrad.Bullock@comp.vuw.ac.nz (Conrad Bullock) writes: > >In article <1991Apr11.122944.5139@bilver.uucp>, dandrews@bilver.uucp >(Dave Andrews) writes: >|> In article >|> cmcdonal@wsmr-emh03.army.mil (Chris McDonald ASQNC-TWS-R-SO) writes: >|> >Recently ISC personnel discovered that a particular feature of >|> ProComm [2.4], >|> >which serves a perfectly legitimate purpose, can pose a security >|> hazard. >|> > ... We do not wish to describe the specific security problem, >|> >|> Though curiosity rages uncontrollably within me, I see the sense to >|> keeping mum, besides which I've upgraded all my PCs to PCP 2.0. Do >|> you know if Procomm Plus version 2 contains the same "feature"? > >At a guess, I'd say the scroll-back buffer is what they're talking about... Could be the log-to-disk function too.... -- Jeffrey R. Comstock