Jim Cornette <fc-cornette@xxxxxxxxxxxxxx> writes: > I was concerned mainly because the two packages were listed in the > vulnerability from 2002. > > http://www.symantec.com/security_response/vulnerability.jsp?bid=6171 Thanks! I thought I remembered something like that. If attackers wanted to get trickier they could even add an intentional buffer overflow to some of the packet parsing code. The code and binaries would look innocent enough. -wolfgang -- Wolfgang S. Rupprecht http://www.wsrcc.com/wolfgang/
