[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]
Message-ID: <m3zjgurxmx.fsf@carbon.jhcloos.org>
Date: Mon, 30 Jun 2014 15:43:25 -0400
From: James Cloos <cloos@...loos.com>
To: Rich Felker <dalias@...c.org>
Cc: musl@...ts.openwall.com, alpine-devel@...ts.alpinelinux.org
Subject: Re: Re: cups debugging, continued...ugly patch
>>>>> "RF" == Rich Felker <dalias@...c.org> writes:
RF> Of course binding a reserved port like this is a serious security
RF> smell -- it sounds like they're trying to facilitate port-based
RF> authentication, which is unsafe if used for anything except localhost.
If it is for the lpd protocol, there are (or at least have been) systems
and printers which only accepted print jobs via lpd if they originated
on the lpd port. Or maybe it was if they originated on a <1024 port.
I have a vague recollection of bug reports for cups in the early days
about that.
-JimC
--
James Cloos <cloos@...loos.com> OpenPGP: 0x997A9F17ED7DAEA6
Powered by blists - more mailing lists
Confused about mailing lists and their use?
Read about mailing lists on Wikipedia
and check out these
guidelines on proper formatting of your messages.
