Great Circle Associates Firewalls
(May 1995)
 

Indexed By Date: [Previous] [Next] Indexed By Thread: [Previous] [Next]

Subject: Re: ACE SecureID Flaw (SunOS 4.1.x)
From: Christopher Davis <ckd @ loiosh . kei . com>
Date: Wed, 17 May 1995 14:10:39 -0400
To: len @ NETSYS . COM (Len Rose)
Cc: firewalls @ greatcircle . com
In-reply-to: <9505170303 . ZM272 @ death . netsys . com>
Newsgroups: kei.mail.firewalls
References: <9505170303 . ZM272 @ death . netsys . com>

LR> == Len Rose <len @
 NETSYS .
 COM>

 LR> Has anyone noted that ACE has linked their code against
 LR> /usr/5lib/libc.so.2.9, which unfortunately has the braindead resolver
 LR> (NIS/hosts)?
[...]
 LR> They need to get with the program and link against the real resolver
 LR> routines in libc.so.1.9.x that use BIND (or at least offer 2 versions
 LR> of the binaries)

Um, no.  Out of the box on SunOS 4.1.x, both /usr/lib/libc.so.1.x (the BSD
shared libraries) and /usr/5lib/libc.so.2.x (the SysV shared libraries)
use NIS (if running) or /etc/hosts (if not).

Given your description it sounds like you've replaced the gethostby*
routines in the BSD shared libraries, but not in the SysV shared
libraries.  This is commonly done simply because not much (other than vi,
and when does *that* resolve hostnames?) uses the SysV shared libraries.

The shres/INSTALL instructions in BIND 4.9.3 (currently at BETA17) include
directions (and a script) for updating both BSD and SysV shared libraries.

They should probably add a note about this in their documentation, though,
since (as I mentioned earlier) many people skip updating the SysV libs.
-- 
Christopher Davis * <ckd @
 kei .
 com> * <URL:http://www.kei.com/homepages/ckd/>
     512/03829F89 =  D7 C9 A7 80 8C 84 3F B2  27 E1 48 61 BF FC 18 B4
    1024/66CB73DD =  46 8E FD F5 12 8E 13 4C  2C 8A 92 A3 B0 D5 2A 5E
	  [ Public keys available by finger, WWW, or keyserver ]


References:
Indexed By Date Previous: Re: 1, Bastion host configuration
From: Adam Safier <asafier @ explorer . csc . com>
Next: Re: ACE SecureID Flaw (SunOS 4.1.x)
From: len @ NETSYS . COM (Len Rose)
Indexed By Thread Previous: ACE SecureID Flaw (SunOS 4.1.x)
From: len @ NETSYS . COM (Len Rose)
Next: Re: ACE SecureID Flaw (SunOS 4.1.x)
From: len @ NETSYS . COM (Len Rose)

Google
 
Search Internet Search www.greatcircle.com