Path: eternal-september.org!news.eternal-september.org!.POSTED!not-for-mail
From: Simon Clubley <clubley@remove_me.eisner.decus.org-Earth.UFP>
Newsgroups: comp.os.vms
Subject: DECNet, was: Re: Viewing SSH users on VMS
Date: Fri, 2 Aug 2024 12:19:32 -0000 (UTC)
Organization: A noiseless patient Spider
Lines: 33
Message-ID: <v8iisj$2qb44$2@dont-email.me>
References: <v83b3h$3c2fu$1@dont-email.me> <dcadcb05751d075777494f05153fb7170358ef40@i2pn2.org> <v8dot6$1isug$1@dont-email.me> <v8e089$1isug$2@dont-email.me> <7c5c2e75afa505b5c6bce9af338f9526412532a8@i2pn2.org> <lh1ciiFctr6U1@mid.individual.net> <v8g2s6$26c24$1@dont-email.me> <lh1qntFctr6U2@mid.individual.net> <v8h42f$2e5g0$2@dont-email.me>
MIME-Version: 1.0
Content-Type: text/plain; charset=iso-8859-1
Content-Transfer-Encoding: 8bit
Injection-Date: Fri, 02 Aug 2024 14:19:32 +0200 (CEST)
Injection-Info: dont-email.me; posting-host="209177095d249675c2cff63b2ce31923";
	logging-data="2960516"; mail-complaints-to="abuse@eternal-september.org";	posting-account="U2FsdGVkX18ieaE7TeVKjAH/obtUtXfGAHLJF3tWKuE="
User-Agent: slrn/0.9.8.1 (VMS/Multinet)
Cancel-Lock: sha1:wbHwkKiM3pG7wq0/Buk3Q0bpil4=

On 2024-08-01, Lawrence D'Oliveiro <ldo@nz.invalid> wrote:
> On Thu, 1 Aug 2024 12:17:00 -0400, bill wrote:
>
>> On 8/1/2024 9:33 AM, Robert A. Brooks wrote:
>>>
>>> On 8/1/2024 8:15 AM, bill wrote:
>>>>
>>>> Could that be that VMS either does or intended SSH to be usable over
>>>> DECNET where there would not have been an IP address?
>>>  �No.
>> 
>> OK.  I guess it was just wishful thinking.  :-)
>
> What kind of person wishes they could use DECnet? ;)

Don't ask Lawrence. :-) There are way too many people around here
who seem to think it's still OK to use DECnet these days...

I don't know if you saw the postings, but I actually found some
dodgy stuff in DECnet Phase IV a couple of years ago. Things that
were not immediately obviously exploitable, but stuff that still
should not be there, such as a fully-privileged EVL or the ability
to crash EVL remotely using a malformed packet.

I wonder if VSI ever got around to fixing the list of DECnet Phase IV
issues I sent them. I am assuming not because I never heard anything
back from them to say they had fixed them.

Simon.

-- 
Simon Clubley, clubley@remove_me.eisner.decus.org-Earth.UFP
Walking destinations on a map are further away than they appear.