Re: finger

From: Patrick Duane Dunston (duane@sukkha.homeip.net)
Date: 08/13/01 

Date: Sun, 12 Aug 2001 20:15:15 -0400 (EDT)
From: Patrick Duane Dunston <duane@sukkha.homeip.net>
To: <security-discuss@linuxsecurity.com>
Subject: Re: finger
Message-ID: <Pine.LNX.4.33.0108122014300.5149-100000@ilm25-40-047.ec.rr.com>

Do you mean a fake finger server running on a machine that returns bogus
information?

On Sun, 12 Aug 2001, Derrick Lewis wrote:

> I was thinking over some intrusion detection techniques. I was
> thinking if there was a way for an attacker to possibly edit the "finger"
> program code to have it not return user information for a certain user
> (ultimately responding with a "finger: userAB: no such user.")? Any
> ideas? Thanks.
>
> --
> Derrick Lewis LinuxSecurity.com
> Assistant Site Manager "The Linux Community's Center for Security."
> (201) 934-9230 http://www.linuxsecurity.com
> dlewis@linuxsecurity.com
>
> ------------------------------------------------------------------------
> To unsubscribe email security-discuss-request@linuxsecurity.com
> with "unsubscribe" in the subject of the message.
> 

-- 
duane

...

Love doesn't make the world go 'round.
Love is what makes the ride worthwhile.
 --Franklin P. Jones

--

GnuPG Public Key:  http://sukkha.homeip.net/pgp.html

--

------------------------------------------------------------------------
     To unsubscribe email security-discuss-request@linuxsecurity.com
         with "unsubscribe" in the subject of the message.