Bugtraq mailing list archives

Re: sendmail exploit script - resend

From: dave () esi com au (Dave Horsfall)
Date: Mon, 28 Mar 1994 15:26:14 +1000 (EST)


On Sun, 27 Mar 1994, Pat Myrto wrote:

[ Negative debug values ]

What is beyond me is how one figured OUT that attack in the first place,


My earliest recollection of this sort of hole was back in Edition 6
Unix, where calling signal(XXX, 0) with a judiciously-selected negative
number would plant "0" within u.u_uid...

-- 
Dave Horsfall (VK2KFU)    VK2KFU @ VK2AAB.NSW.AUS.OC     PGP 2.3
dave () esi COM AU           ...munnari!esi.COM.AU!dave    available

Current thread:

here's a weird one *Hobbit* (Mar 10)