tcpwrappers & shell execution

Top Page
Attachments:
Message as email
+ (text/plain)
Delete this message
Reply to this message
Author: Jeremy C. Reed
Date:  
Subject: tcpwrappers & shell execution
On Mon, 24 Mar 2003, Mike Starke wrote:

> ALL: ALL: (/usr/bin/wavp siren.wav)&
>
> In fact, the output of 'tcpdchk' reports the following:
> error: /etc/hosts.deny, line 1: bad option name: "(/usr/bin/wavp"


Look at the "spawn" and/or "twist" functions in your hosts_access(5) and
host_options(5) manuals.

(Hopefully, you don't cause a local denial of service attack.)

Jeremy C. Reed
http://bsd.reedmedia.net/