[Prev][Next][Index][Thread]
Summary: (more) secure ultrix talkd
Months ago I posted a request for an ultrix talkd/ntalkd that
was not vulnerable to the security problems mentioned in
CERT alert CA-97.04. I received several suggestions, but none of
them worked on our systems.
About a month ago, I got patched versions of talkd and ntalkd from
DEC. This was prior to the release of the official patches.
Presumably the official patches are now available from DEC, if anyone
else is in the same boat.
Regards, Michele Tomkin
UC Berkeley
---------------------------------------------------
>From michele Wed Jun 4 13:20:29 1997
To: decstation-managers@xxxxxxxx
Subject: (more) secure ultrix talkd?
We turned off our talkd, on our DEC 5900's running Ultrix 4.3A several
months ago in response to CERT alert CA-97.04. DEC tells us:
The issue of CERT advisory CA-97.04 is being addressed by our
security review board. I will make the patch kit available
to you as soon as I receive it.
But we have yet to see a patch and our users are clamouring.
Has anyone found a replacement talkd that works on Ultrix and
does not have the security hole?
I've attempted to try the NetBSD version, but I've not found
a version of their "make" that will compile with that standard
ultrix "make".
Thanks, Michele Tomkin