rsh -l doesn't require a password

[Keith Starsmeare]

There appears to be a security problem with the inetd. I can access my
NT box via rsh remotely without giving a password if I use the -l
option to specify a valid user account:

  % rsh -l kstarsm kampala id
  uid=18(system) gid=512(domadmin) groups=512(domadmin)

As I haven't set up the hosts.equiv or .rhosts files I would hope to see:
  % rsh -l kstarsm kampala id
  Permission denied.

Keith



--
Want to unsubscribe from this list?
Check out: http://cygwin.com/ml/#unsubscribe-simple