From owner-FreeBSD-net-jp@jp.freebsd.org  Tue Jul 21 18:38:18 1998
Received: (from daemon@localhost)
	by jaz.jp.freebsd.org (8.8.8+3.0Wbeta13/8.7.3) id PAA02427;
	Tue, 21 Jul 1998 15:10:29 +0900 (JST)
	(envelope-from owner-FreeBSD-net-jp@jp.FreeBSD.org)
Received: from napoleon.jimu.tezukayama-u.ac.jp ([160.244.201.103])
	by jaz.jp.freebsd.org (8.8.8+3.0Wbeta13/8.7.3) with ESMTP id PAA02418
	for <FreeBSD-net-jp@jp.freebsd.org>; Tue, 21 Jul 1998 15:10:26 +0900 (JST)
	(envelope-from morimoto@jimu.tezukayama-u.ac.jp)
Received: from express.jimu.tezukayama-u.ac.jp (express.jimu.tezukayama-u.ac.jp [160.244.201.105])
	by napoleon.jimu.tezukayama-u.ac.jp (8.8.8+3.0Wbeta13/3.6Wbeta7) with SMTP id GAA24877
	for <FreeBSD-net-jp@jp.freebsd.org>; Wed, 22 Jul 1998 06:49:06 +0900 (JST)
Received: by express.jimu.tezukayama-u.ac.jp(Lotus SMTP MTA SMTP v4.6 (462.2 9-3-1997))  id 49256648.0021DE89 ; Tue, 21 Jul 1998 15:09:56 +0900
X-Lotus-FromDomain: TEZUKAYAMA
From: "Toru Morimoto" <morimoto@jimu.tezukayama-u.ac.jp>
To: FreeBSD-net-jp@jp.freebsd.org
Message-ID: <49256667.002164C2.00@express.jimu.tezukayama-u.ac.jp>
Date: Tue, 21 Jul 1998 15:10:05 +0900
Mime-Version: 1.0
Content-type: text/plain; charset=iso-2022-jp
Reply-To: FreeBSD-net-jp@jp.freebsd.org
Precedence: list
X-Distribute: distribute [version 2.1 (Alpha) patchlevel=24e+ JFUG special]
X-Sequence: FreeBSD-net-jp 879
Subject: [FreeBSD-net-jp 879] Re: qpopper secrurity hole and FreeBSD
Errors-To: owner-FreeBSD-net-jp@jp.freebsd.org
Sender: owner-FreeBSD-net-jp@jp.freebsd.org

$B?9K\!wDkDM;33X1`$H?=$7$^$9!#(B

$BEDH*(B $BBsIW(B $B$5$s$O=q$-$^$7$?!'(B


> $B!!(Bqpopper2.53$B$r(Bports$B$+$i%$%s%9%H!<%k$7$^$7$?!#(B
> $B!!$=$3$G<ALd$J$N$G$9$,!"(Bqpopper$B$N%P!<%8%g%s$C$F$I$&$d$C$?$i$_$l$k$N$G$7$g(B
> $B$&$+!)(B
$B$b$&(B popper$B$,5/F0$G$-$k>u67$K$"$k$N$G$7$?$i!"(B

telnet localhost 110

$B$G!"(Bpopper $B$r5/F0$7$F$_$k$H!"65$($F$/$l$k$H;W$$$^$9!#(B
# $B;d$N=j$O(B 2.52 $B$G$9$,!"$-$C$H0l=o$G$7$g$&!#(B
## $B$b$7!"(BAPOP$BG'>Z$7$+%@%a$H$7$F$?$i$3$N<j$O;H$($^$;$s$,!#(B

> $B!!(Bwhich popper[ENTER]
> $B!!$J$I$H$d$C$F$_$?$N$G$9$,!"8+$D$+$i$J$$!J!)!K$N$G$9$,!&!&!&!&!#(B
> $B!!%G%#%l%/%H%j$rJR$CC<$+$i!V(Bls$B!W$G8+$F$$$/$7$+$J$$$s$G$9$+!)(B

$B;d$O(B ports $B$r;H$C$F$J$+$C$?$N$G$h$/J,$+$j$^$;$s$,!"(B

$BDL>o(B qpopper $B$O(B inetd $B$+$i5/$3$5$l$k$H$*$b$$$^$9$+$i!"(B

/etc/inetd.conf $B$G!"(Bpop3 $B$N=j$r$_$F$/$@$5$$!#(B

/usr/local/libexec $B$"$?$j$K$$$k$H=q$$$F$"$k$+$H;W$$$^$9!#(B


---------------------------------------  We love KOBE ! ------
Toru MORIMOTO  morimoto@jimu.tezukayama-u.ac.jp
$B?9K\!!5|!JDkDM;33X1`K\It;vL36I%7%9%F%`2]!K(B


