home
***
CD-ROM
|
disk
|
FTP
|
other
***
search
/
Freaks Macintosh Archive
/
Freaks Macintosh Archive.bin
/
Freaks Macintosh Archives
/
Hacking & Misc
/
bundle of exploits.sit
/
bundle of exploits
/
finger_attack.txt
< prev
next >
Wrap
Text File
|
1998-07-17
|
717b
|
28 lines
fingerd Exploit
Platform: Any running a non-pathed fingerd
Description:
Remote finger'ing allowd multiple @'s, and allows bogus
finger commands.
Exploit: By using several logins you can make it appear like a user
on hut.fi is using finger on a user at nonhut.fi like this:
>finger jabba@hut.fi@nonhut.fi
This may cause a server to crash by using recursive finger
like this:
>finger jabba@@@@@@@@@@@hut.fi
Fix:
Remove finger form inetd.conf and kill it.
Patch?:
http://prep.ai.mit.edu/pub/gnu/finger-1.37.tar.gz
Source: Dont remember.