From Bugzilla Helper: User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; iOpus-I-M; SV1)
Description of problem: The x8664 bit version of AS4 (fully patched) appears to ignore tcpwrappers completely when using gdm with XDMCP. The 32 bit version of AS4 works perfectly so this bug appears to be restricted to the 64bit version. I suspect the problem with the wrappers on the 64 bit version may be a bit more general than just XDMCP access as I tested a telnet server and while the wrappers are not completely ignored connections are not refused cleanly (You donât get the login prompt but you are still hooked up to the machine). The 32 bit version again works perfectly.
Version-Release number of selected component (if applicable): tcpwrappers
How reproducible: Always
Steps to Reproduce: 1. Instll the OS 2. Configure gdmsetup to allow remote XDMCP conectivity 3. configure hosts.deny to restrict conections all:all
Actual Results: no restriction to remote desktop
Expected Results: remote desktop should have been refused
Additional info:
snmpd server in cmu-snmp SNMP package before 3.3-1 in Red Hat Linux 4.0 is configured to allow remote attackers to read and write sensitive information.