Bugtraq: Re: vixie cron possible local root compromise

[Nelson Brito <nelson () SECUNET COM BR>]

"Rodrigo Barbosa (aka morcego)" wrote:

[...]

First mail:
> #include <wtmpx.h>
>
> main () {
>         printf("%d\n",__UT_NAMESIZE);
> }
>
> or, if your system does not have wtmpx.h
>
> #include <wtmp.h>
>
> main () {
>         printf("%d\n",UT_NAMESIZE);
> }
Second mail:
> On my last post, I included two simple programs to check the max length of
> the login name. But the includes where wrong. Should have been utmpx.h and
> utmp.h (not wtmpx.h and wtmp.h).
>
> Sorry about the mess.
>
> The correct codes would be:
>
> #include <wtmpx.h>
>
> main () {
>         printf("%d\n",__UT_NAMESIZE);
> }
>
> and
>
> #include <wtmp.h>
>
> main () {
>         printf("%d\n",UT_NAMESIZE);
> }
Am I missing something? What's the difference bettwen codes? It is the
same code, isn't it?

Sem mais,
--
Nelson Brito
"Windows NT can also be protected from nmap OS detection scans thanks
to *Nelson Brito* ..."
              Trecho do livro "Hack Proofing your Network", página 93