tcpwrappers & shell execution
Jeremy C. Reed
plug-discuss@lists.plug.phoenix.az.us
Mon, 24 Mar 2003 15:09:02 -0800 (PST)
On Mon, 24 Mar 2003, Mike Starke wrote:
> ALL: ALL: (/usr/bin/wavp siren.wav)&
>
> In fact, the output of 'tcpdchk' reports the following:
> error: /etc/hosts.deny, line 1: bad option name: "(/usr/bin/wavp"
Look at the "spawn" and/or "twist" functions in your hosts_access(5) and
host_options(5) manuals.
(Hopefully, you don't cause a local denial of service attack.)
Jeremy C. Reed
http://bsd.reedmedia.net/