Re: finger-bombing

[fitz () wang com (Tom Fitzgerald)]

> The same hack in a different fashion on SunOS 4.1.x will give random users
> profiles (at least from what I have seen.. At one time I thought not).
>
> Example: finger 23234123123123123 () some sunos host com
>
> The rather large number has strange effect on fingerd -- I haven't looked
> close enought to see what.

I can't make this behave any differently than "finger 1 () some sunos host";
it prints detailed info on all users who have a blank gecos field.  It
seems to fall into some code in finger that assumes that numbers are office
numbers (or building numbers or something) and throws them away.  Then it
takes the remainder (in this case, the null string) and prints all users
with matching gecos fields.

-- 
Tom Fitzgerald    1-508-967-5278    Wang Labs, Lowell MA, USA    fitz () wang com