Path: utzoo!utgpu!news-server.csri.toronto.edu!rpi!zaphod.mps.ohio-state.edu!pacific.mps.ohio-state.edu!linac!att!ucbvax!HOBBES.KZOO.EDU!jprice
From: jprice@HOBBES.KZOO.EDU (Janet Price)
Newsgroups: comp.unix.ultrix
Subject: puzzling security problem
Message-ID: <9106211708.AA04903@hobbes.kzoo.edu>
Date: 21 Jun 91 17:08:55 GMT
Sender: daemon@ucbvax.BERKELEY.EDU
Lines: 13


 
Ultrix security mavens:
 
We have discovered a security problem on our Ultrix system that has us
baffled.  It seems to involve bypassing the /etc/services file and
binding via telnet to a port that is not listed in the file.  I'm
uncomfortable describing the problem in more detail.  I hope this isn't
too much detail, in fact.  If this rings a bell with anyone, would you
please email me directly, since we're not yet getting news.

       Janet Price (jprice@kzoo.edu)
	   Director of Computing, Kalamazoo College