ARCHIVE: 'Phage List' - Archives (1988 - 1989)
DOCUMENT: phage #067 [Re: possible Ultrix immunity?] (1 message, 478 bytes)
NOTICE: securitydigest.org recognises the rights of all third-party works.
START OF DOCUMENT
From: Chris Torek <firstname.lastname@example.org>
Date: Sat 22:01:02 05/11/1988 EST
Subject: Re: possible Ultrix immunity?
References: [Thread Prev: 040] [Thread Next: 108] [Message Prev: 066] [Message Next: 068]
Ultrix 2.x sites that are not using the name server are immune only because the vax binaries were compiled against the new <netdb.h>. (The worm brings over a vax .o file and links that against your libc to produce the executable.) The new netdb.h has char **h_addr_list; #define h_addr h_addr_list while the old one has char *h_addr; so the code core dumps when it tries to use h_addr[*]. CHris
END OF DOCUMENT
|ISSN 1742-948X 01 (Online) | 2005/03/01 | Copyright 2002-2008 securitydigest.org. All rights reserved.|