X-Message-Index: 162
X-Message-Prev: 155
X-Message-Next: 408
X-Thread-Prev: 149
X-Thread-Next: 179
From: page@swan.ulowell.edu (Bob Page)
To: phage
X-To: jbs@EDDIE.MIT.EDU, phage
Subject: fingerd bug
Date: Tue, 8 Nov 88 12:22:52 EST
X-Date: Tue 12:22:52 08/11/1988 EST

The summary/report I sent out yesterday wasn't clear about this because
I didn't know (I haven't actually seen the virus).  Chris Torek filled
me in on some details, including this:

	The fingerd hole works by writing machine code into
	the buffer that is overflowed; obviously, this technique
	is machine-dependent.  Probably if he had had Sun code
	he would have chosen which to try at random.

..Bob