tcpwrappers & shell execution

Jeremy C. Reed plug-discuss@lists.plug.phoenix.az.us
Mon, 24 Mar 2003 15:09:02 -0800 (PST)


On Mon, 24 Mar 2003, Mike Starke wrote:

> ALL: ALL: (/usr/bin/wavp siren.wav)&
>
> In fact, the output of 'tcpdchk' reports the following:
> error: /etc/hosts.deny, line 1: bad option name: "(/usr/bin/wavp"

Look at the "spawn" and/or "twist" functions in your hosts_access(5) and
host_options(5) manuals.

(Hopefully, you don't cause a local denial of service attack.)

   Jeremy C. Reed
   http://bsd.reedmedia.net/