[Top][All Lists]

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [bug-inetutils] "echo" dgram service in *inetd and UDP packets with

From: Stephane Chazelas
Subject: Re: [bug-inetutils] "echo" dgram service in *inetd and UDP packets with source port 7
Date: Mon, 1 Dec 2014 06:21:27 +0000
User-agent: Mutt/1.5.21 (2010-09-15)

2014-11-30 09:00:51 +0100, Marco d'Itri:
> On Nov 29, Stephane Chazelas <address@hidden> wrote:
> > Yes, but I don't think RFC conformance is good enough a reason
> > to not fix a vulnerability.
> Everybody has known this for years.
> UDP small services should never be enabled, that's all.

Thanks Marco,

would you guys accept a patch that adds that (or something along
those lines) to the documentation?

Maybe something like:

"With the exception of "discard", please note that the protocols
implemented by the internal UDP services (chargen, time,
daytime, echo) have serious security flaws and those services
should not be enabled on production systems or exposed to
untrusted networks."


reply via email to

[Prev in Thread] Current Thread [Next in Thread]