An unofficial but trustworthy word about the WORM and ULTRIX from Digital

[Leonard J. Peirce]

In article <269 at popvax.harvard.edu> mohamed at popvax.harvard.edu (Mohamed Ellozy) writes:
>In article <2581 at decuac.DEC.COM> avolio at decuac.DEC.COM (Frederick M. Avolio) writes:
>>No official fix has come out from Digital regarding the sendmail/fingerd
>>worm hole (whoah!) because ULTRIX machines are not affected.  ULTRIX sendmail
>
>What is the status of ftpd under ULTRIX (present, Field Test and future)?
>Does the bug exist, and if so have users been notified?  As I recall, the
>bug was only described in comp.bugs.4bsd.ucb-fixes, a group that is probably
>subscribed to by very few binary sites.

Yes, the ftpd bug does exist.  Shut off anonymous FTP for the time being.
I have contacted our DEC rep to see if a patch is available.
-- 
Leonard J. Peirce               Internet:  peirce at gumby.cc.wmich.edu
Western Michigan University                peirce at gw.wmich.edu
Academic Computer Center        Voice:     (616) 387-5469
Kalamazoo, MI  49008