Re: PFinger 0.7.8 format string vulnerability (#NISR16122002B)

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



On Mon, Dec 16, 2002 at 11:56:10PM -0500, Valdis.Kletnieks@vt.edu wrote:
> 
> *ON THE WIRE*, all 256 byte codes are legal, since DNS uses a length-data

Yes noone said it is not, but fact is, the libc resolvers simply do not
allow them, so you can send through the wire whatever you want it will
not find its way to the fingerd.

Stefan Esser

Attachment: pgp00256.pgp
Description: PGP signature


[Index of Archives]     [Linux Security]     [Netfilter]     [PHP]     [Yosemite News]     [Linux Kernel]

  Powered by Linux