/ InfoMagic Internet Tools 1993 July / Internet Tools.iso / RockRidge / archival / ftp / holefixes / sendmailfix

< prev

next >

MacOS 8.1

Win98

DOS

browse contents

view JSON data

view as text

+--------+-------------------------+-------------------------+--------+--------+
|00000000| 46 72 6f 6d 20 53 75 6e | 2d 4e 65 74 73 2d 72 65 |From Sun|-Nets-re|
|00000010| 71 75 65 73 74 40 62 72 | 69 6c 6c 69 67 2e 75 6d |quest@br|illig.um|
|00000020| 64 2e 65 64 75 20 20 46 | 72 69 20 4e 6f 76 20 20 |d.edu  F|ri Nov  |
|00000030| 34 20 31 38 3a 31 38 3a | 32 39 20 31 39 38 38 20 |4 18:18:|29 1988 |
|00000040| 20 0a 52 65 63 65 69 76 | 65 64 3a 20 62 79 20 62 | .Receiv|ed: by b|
|00000050| 72 69 6c 6c 69 67 2e 75 | 6d 64 2e 65 64 75 20 28 |rillig.u|md.edu (|
|00000060| 35 2e 35 38 2f 34 2e 37 | 29 0a 09 69 64 20 41 41 |5.58/4.7|)..id AA|
|00000070| 30 36 38 32 30 3b 20 46 | 72 69 2c 20 34 20 4e 6f |06820; F|ri, 4 No|
|00000080| 76 20 38 38 20 31 38 3a | 31 38 3a 32 39 20 45 53 |v 88 18:|18:29 ES|
|00000090| 54 0a 44 61 74 65 3a 20 | 46 72 69 2c 20 34 20 4e |T.Date: |Fri, 4 N|
|000000a0| 6f 76 20 38 38 20 31 38 | 3a 31 35 3a 31 39 20 45 |ov 88 18|:15:19 E|
|000000b0| 53 54 0a 46 72 6f 6d 3a | 20 53 74 65 76 65 20 44 |ST.From:| Steve D|
|000000c0| 2e 20 4d 69 6c 6c 65 72 | 20 3c 73 74 65 76 65 40 |. Miller| <steve@|
|000000d0| 6d 69 6d 73 79 2e 75 6d | 64 2e 65 64 75 3e 0a 4d |mimsy.um|d.edu>.M|
|000000e0| 65 73 73 61 67 65 2d 49 | 64 3a 20 3c 38 38 31 31 |essage-I|d: <8811|
|000000f0| 30 34 32 33 31 35 2e 41 | 41 32 36 30 32 35 40 6d |042315.A|A26025@m|
|00000100| 69 6d 73 79 2e 75 6d 64 | 2e 65 64 75 3e 0a 54 6f |imsy.umd|.edu>.To|
|00000110| 3a 20 64 63 73 6c 75 67 | 40 6d 69 6d 73 79 2e 75 |: dcslug|@mimsy.u|
|00000120| 6d 64 2e 65 64 75 2c 20 | 73 75 6e 2d 6e 65 74 73 |md.edu, |sun-nets|
|00000130| 40 62 72 69 6c 6c 69 67 | 2e 75 6d 64 2e 65 64 75 |@brillig|.umd.edu|
|00000140| 0a 53 75 62 6a 65 63 74 | 3a 20 41 20 76 69 72 75 |.Subject|: A viru|
|00000150| 73 20 72 65 63 61 70 2e | 2e 20 6c 65 74 27 73 20 |s recap.|. let's |
|00000160| 74 72 79 20 61 67 61 69 | 6e 21 0a 43 63 3a 20 73 |try agai|n!.Cc: s|
|00000170| 75 6e 64 63 21 6a 6f 65 | 6c 40 73 75 6e 2e 63 6f |undc!joe|l@sun.co|
|00000180| 6d 0a 53 65 6e 64 65 72 | 3a 20 53 75 6e 2d 4e 65 |m.Sender|: Sun-Ne|
|00000190| 74 73 2d 72 65 71 75 65 | 73 74 40 62 72 69 6c 6c |ts-reque|st@brill|
|000001a0| 69 67 2e 75 6d 64 2e 65 | 64 75 0a 0a 20 20 20 49 |ig.umd.e|du..   I|
|000001b0| 20 77 61 6e 74 65 64 20 | 74 6f 20 74 61 6b 65 20 | wanted |to take |
|000001c0| 73 6f 6d 65 20 74 69 6d | 65 20 74 6f 20 70 61 73 |some tim|e to pas|
|000001d0| 73 20 61 6c 6f 6e 67 20 | 74 6f 20 61 6c 6c 20 6f |s along |to all o|
|000001e0| 66 20 79 6f 75 20 73 6f | 6d 65 20 6d 6f 72 65 0a |f you so|me more.|
|000001f0| 69 6e 66 6f 72 6d 61 74 | 69 6f 6e 20 61 62 6f 75 |informat|ion abou|
|00000200| 74 20 74 68 65 20 72 65 | 63 65 6e 74 20 49 6e 74 |t the re|cent Int|
|00000210| 65 72 6e 65 74 20 76 69 | 72 61 6c 20 69 6e 66 65 |ernet vi|ral infe|
|00000220| 63 74 69 6f 6e 2e 20 20 | 54 68 65 20 76 69 72 75 |ction.  |The viru|
|00000230| 73 27 20 62 61 73 69 63 | 0a 6d 6f 64 65 20 6f 66 |s' basic|.mode of|
|00000240| 20 6f 70 65 72 61 74 69 | 6f 6e 20 68 61 73 20 6c | operati|on has l|
|00000250| 61 72 67 65 6c 79 20 62 | 65 65 6e 20 66 69 67 75 |argely b|een figu|
|00000260| 72 65 64 20 6f 75 74 2c | 20 63 6f 75 72 74 65 73 |red out,| courtes|
|00000270| 79 20 6f 66 20 61 20 6e | 75 6d 62 65 72 20 6f 66 |y of a n|umber of|
|00000280| 0a 70 65 6f 70 6c 65 20 | 61 72 6f 75 6e 64 20 74 |.people |around t|
|00000290| 68 65 20 49 6e 74 65 72 | 6e 65 74 2e 20 20 28 49 |he Inter|net.  (I|
|000002a0| 27 6d 20 62 65 69 6e 67 | 20 76 61 67 75 65 20 68 |'m being| vague h|
|000002b0| 65 72 65 20 62 65 63 61 | 75 73 65 20 49 27 6d 20 |ere beca|use I'm |
|000002c0| 69 6e 20 61 20 68 75 72 | 72 79 2e 0a 49 20 68 61 |in a hur|ry..I ha|
|000002d0| 76 65 20 61 20 6c 6f 74 | 20 6d 6f 72 65 20 6d 61 |ve a lot| more ma|
|000002e0| 69 6c 20 73 69 74 74 69 | 6e 67 20 61 72 6f 75 6e |il sitti|ng aroun|
|000002f0| 64 20 6f 6e 20 74 68 69 | 73 20 74 6f 70 69 63 2c |d on thi|s topic,|
|00000300| 20 62 75 74 20 49 20 68 | 61 76 65 6e 27 74 20 68 | but I h|aven't h|
|00000310| 61 64 20 74 68 65 0a 74 | 69 6d 65 20 79 65 74 20 |ad the.t|ime yet |
|00000320| 74 6f 20 73 6f 72 74 20 | 74 68 72 6f 75 67 68 20 |to sort |through |
|00000330| 69 74 20 61 6e 64 20 63 | 6f 6d 65 20 75 70 20 77 |it and c|ome up w|
|00000340| 69 74 68 20 73 6f 6d 65 | 74 68 69 6e 67 20 63 6f |ith some|thing co|
|00000350| 68 65 72 65 6e 74 2e 20 | 20 49 27 6d 20 74 72 79 |herent. | I'm try|
|00000360| 69 6e 67 0a 74 6f 20 70 | 61 73 73 20 61 6c 6f 6e |ing.to p|ass alon|
|00000370| 67 20 69 6d 70 6f 72 74 | 61 6e 74 20 66 61 63 74 |g import|ant fact|
|00000380| 6f 69 64 73 20 6e 6f 77 | 2c 20 61 6e 64 20 77 69 |oids now|, and wi|
|00000390| 6c 6c 20 74 72 79 20 74 | 6f 20 70 72 6f 76 69 64 |ll try t|o provid|
|000003a0| 65 20 6d 6f 72 65 20 64 | 65 74 61 69 6c 73 0a 6c |e more d|etails.l|
|000003b0| 61 74 65 72 2e 29 20 20 | 54 68 65 72 65 20 61 72 |ater.)  |There ar|
|000003c0| 65 20 74 77 6f 20 62 61 | 73 69 63 20 6d 65 74 68 |e two ba|sic meth|
|000003d0| 6f 64 73 20 6f 66 20 69 | 6e 66 65 63 74 69 6f 6e |ods of i|nfection|
|000003e0| 3a 0a 0a 20 20 20 20 20 | 20 20 20 31 29 20 54 68 |:..     |   1) Th|
|000003f0| 65 20 76 69 72 75 73 20 | 75 73 65 73 20 74 68 65 |e virus |uses the|
|00000400| 20 73 65 6e 64 6d 61 69 | 6c 20 70 73 65 75 64 6f | sendmai|l pseudo|
|00000410| 2d 53 4d 54 50 20 63 6f | 6d 6d 61 6e 64 20 22 64 |-SMTP co|mmand "d|
|00000420| 65 62 75 67 22 2c 20 69 | 6e 0a 20 20 20 20 20 20 |ebug", i|n.      |
|00000430| 20 20 63 6f 6e 6a 75 6e | 63 74 69 6f 6e 20 77 69 |  conjun|ction wi|
|00000440| 74 68 20 73 6f 6d 65 20 | 6f 74 68 65 72 20 74 68 |th some |other th|
|00000450| 69 6e 67 73 2c 20 74 6f | 20 73 74 61 72 74 20 75 |ings, to| start u|
|00000460| 70 20 61 20 73 68 65 6c | 6c 20 6f 6e 20 74 68 65 |p a shel|l on the|
|00000470| 0a 20 20 20 20 20 20 20 | 20 76 69 63 74 69 6d 20 |.       | victim |
|00000480| 6d 61 63 68 69 6e 65 2e | 20 20 54 68 69 73 20 77 |machine.|  This w|
|00000490| 6f 72 6b 73 20 6f 6e 20 | 56 41 58 65 6e 20 61 6e |orks on |VAXen an|
|000004a0| 64 20 53 75 6e 73 2e 0a | 0a 20 20 20 20 20 20 20 |d Suns..|.       |
|000004b0| 20 32 29 20 54 68 65 20 | 76 69 72 75 73 20 65 78 | 2) The |virus ex|
|000004c0| 70 6c 6f 69 74 73 20 61 | 20 62 75 67 20 69 6e 20 |ploits a| bug in |
|000004d0| 74 68 65 20 66 69 6e 67 | 65 72 20 64 61 65 6d 6f |the fing|er daemo|
|000004e0| 6e 20 74 6f 20 6c 61 79 | 20 64 6f 77 6e 20 61 20 |n to lay| down a |
|000004f0| 6e 65 77 0a 20 20 20 20 | 20 20 20 20 73 74 61 63 |new.    |    stac|
|00000500| 6b 20 66 72 61 6d 65 20 | 61 6e 64 20 74 68 65 6e |k frame |and then|
|00000510| 20 6a 75 6d 70 20 74 6f | 20 69 74 2e 20 20 54 68 | jump to| it.  Th|
|00000520| 69 73 20 6e 65 77 20 66 | 72 61 6d 65 20 73 74 61 |is new f|rame sta|
|00000530| 72 74 73 20 61 20 73 68 | 65 6c 6c 2e 0a 20 20 20 |rts a sh|ell..   |
|00000540| 20 20 20 20 20 54 68 69 | 73 20 77 6f 72 6b 73 20 |     Thi|s works |
|00000550| 6f 6e 6c 79 20 6f 6e 20 | 56 41 58 65 6e 2c 20 74 |only on |VAXen, t|
|00000560| 68 6f 75 67 68 20 69 74 | 20 73 65 65 6d 73 20 70 |hough it| seems p|
|00000570| 6f 73 73 69 62 6c 65 20 | 74 6f 20 6d 65 20 74 68 |ossible |to me th|
|00000580| 61 74 0a 20 20 20 20 20 | 20 20 20 73 6f 6d 65 6f |at.     |   someo|
|00000590| 6e 65 20 63 6f 75 6c 64 | 20 73 6f 6d 65 64 61 79 |ne could| someday|
|000005a0| 20 77 72 69 74 65 20 61 | 20 76 65 72 73 69 6f 6e | write a| version|
|000005b0| 20 74 68 61 74 20 6d 69 | 67 68 74 20 77 6f 72 6b | that mi|ght work|
|000005c0| 20 6f 6e 20 53 75 6e 73 | 2e 0a 0a 20 20 20 4f 6e | on Suns|...   On|
|000005d0| 63 65 20 74 68 65 20 76 | 69 72 75 73 20 67 65 74 |ce the v|irus get|
|000005e0| 73 20 61 20 73 68 65 6c | 6c 2c 20 69 74 20 73 75 |s a shel|l, it su|
|000005f0| 63 6b 73 20 6f 76 65 72 | 20 61 20 6e 75 6d 62 65 |cks over| a numbe|
|00000600| 72 20 6f 66 20 66 69 6c | 65 73 20 66 72 6f 6d 20 |r of fil|es from |
|00000610| 74 68 65 0a 6d 61 63 68 | 69 6e 65 20 69 6e 66 65 |the.mach|ine infe|
|00000620| 63 74 69 6e 67 20 74 68 | 69 73 20 76 69 63 74 69 |cting th|is victi|
|00000630| 6d 2e 20 20 54 68 65 73 | 65 20 65 78 65 63 75 74 |m.  Thes|e execut|
|00000640| 61 62 6c 65 73 20 64 6f | 20 74 68 65 20 66 6f 6c |ables do| the fol|
|00000650| 6c 6f 77 69 6e 67 3a 0a | 0a 20 20 20 20 20 20 20 |lowing:.|.       |
|00000660| 20 31 29 20 55 73 65 20 | 74 68 65 20 6f 75 74 70 | 1) Use |the outp|
|00000670| 75 74 20 6f 66 20 6e 65 | 74 73 74 61 74 20 2d 6e |ut of ne|tstat -n|
|00000680| 20 2d 72 2c 20 61 6c 6f | 6e 67 20 77 69 74 68 20 | -r, alo|ng with |
|00000690| 2f 65 74 63 2f 68 6f 73 | 74 73 20 28 6f 72 20 74 |/etc/hos|ts (or t|
|000006a0| 68 65 0a 20 20 20 20 20 | 20 20 20 68 6f 73 74 73 |he.     |   hosts|
|000006b0| 20 59 50 20 6d 61 70 29 | 20 61 6e 64 20 76 61 72 | YP map)| and var|
|000006c0| 69 6f 75 73 20 2e 72 68 | 6f 73 74 73 2d 74 79 70 |ious .rh|osts-typ|
|000006d0| 65 20 66 69 6c 65 73 20 | 74 6f 20 70 69 63 6b 20 |e files |to pick |
|000006e0| 69 74 73 20 6e 65 78 74 | 0a 20 20 20 20 20 20 20 |its next|.       |
|000006f0| 20 74 61 72 67 65 74 73 | 2e 0a 0a 20 20 20 20 20 | targets|...     |
|00000700| 20 20 20 32 29 20 55 73 | 65 20 65 69 74 68 65 72 |   2) Us|e either|
|00000710| 20 61 20 62 75 69 6c 74 | 2d 69 6e 20 64 69 63 74 | a built|-in dict|
|00000720| 69 6f 6e 61 72 79 20 6f | 72 20 2f 75 73 72 2f 64 |ionary o|r /usr/d|
|00000730| 69 63 74 2f 77 6f 72 64 | 73 20 74 6f 20 74 72 79 |ict/word|s to try|
|00000740| 20 74 6f 0a 20 20 20 20 | 20 20 20 20 63 72 61 63 | to.    |    crac|
|00000750| 6b 20 70 61 73 73 77 6f | 72 64 73 20 62 79 20 62 |k passwo|rds by b|
|00000760| 72 75 74 65 20 66 6f 72 | 63 65 2e 20 20 4f 6e 63 |rute for|ce.  Onc|
|00000770| 65 20 61 63 63 6f 75 6e | 74 73 20 61 72 65 20 63 |e accoun|ts are c|
|00000780| 72 61 63 6b 65 64 2c 20 | 74 68 65 69 72 0a 20 20 |racked, |their.  |
|00000790| 20 20 20 20 20 20 2e 72 | 68 6f 73 74 73 20 66 69 |      .r|hosts fi|
|000007a0| 6c 65 73 20 61 72 65 20 | 75 73 65 64 20 69 6e 20 |les are |used in |
|000007b0| 61 6e 20 61 74 74 65 6d | 70 74 20 74 6f 20 22 67 |an attem|pt to "g|
|000007c0| 75 65 73 73 22 20 77 68 | 65 72 65 20 6f 74 68 65 |uess" wh|ere othe|
|000007d0| 72 0a 20 20 20 20 20 20 | 20 20 70 6f 74 65 6e 74 |r.      |  potent|
|000007e0| 69 61 6c 20 76 69 63 74 | 69 6d 73 20 72 65 73 69 |ial vict|ims resi|
|000007f0| 64 65 2e 20 20 28 41 66 | 74 65 72 20 61 6c 6c 2c |de.  (Af|ter all,|
|00000800| 20 69 66 20 66 6f 6f 40 | 62 61 72 2e 63 6f 6d 20 | if foo@|bar.com |
|00000810| 69 73 20 69 6e 20 79 6f | 75 72 0a 20 20 20 20 20 |is in yo|ur.     |
|00000820| 20 20 20 2e 72 68 6f 73 | 74 73 2c 20 79 6f 75 27 |   .rhos|ts, you'|
|00000830| 72 65 20 70 72 6f 62 61 | 62 6c 79 20 69 6e 20 66 |re proba|bly in f|
|00000840| 6f 6f 40 62 61 72 2e 63 | 6f 6d 27 73 20 2e 72 68 |oo@bar.c|om's .rh|
|00000850| 6f 73 74 73 2c 20 74 6f | 6f 2e 2e 2e 29 20 20 49 |osts, to|o...)  I|
|00000860| 74 20 74 68 65 6e 0a 20 | 20 20 20 20 20 20 20 72 |t then. |       r|
|00000870| 73 68 65 73 20 61 63 72 | 6f 73 73 20 61 6e 64 20 |shes acr|oss and |
|00000880| 73 74 61 72 74 73 20 63 | 72 61 63 6b 69 6e 67 20 |starts c|racking |
|00000890| 61 6e 64 20 73 70 72 65 | 61 64 69 6e 67 20 6f 6e |and spre|ading on|
|000008a0| 63 65 20 61 67 61 69 6e | 2e 0a 0a 20 20 20 54 68 |ce again|...   Th|
|000008b0| 65 72 65 20 61 72 65 20 | 61 20 66 65 77 20 64 69 |ere are |a few di|
|000008c0| 66 66 65 72 65 6e 74 20 | 74 68 69 6e 67 73 20 79 |fferent |things y|
|000008d0| 6f 75 20 63 61 6e 20 64 | 6f 20 74 6f 20 70 72 6f |ou can d|o to pro|
|000008e0| 74 65 63 74 20 79 6f 75 | 72 73 65 6c 66 2e 20 20 |tect you|rself.  |
|000008f0| 46 69 72 73 74 2c 0a 49 | 20 73 75 67 67 65 73 74 |First,.I| suggest|
|00000900| 20 74 75 72 6e 69 6e 67 | 20 6f 66 66 20 66 69 6e | turning| off fin|
|00000910| 67 65 72 64 2c 20 6a 75 | 73 74 20 74 6f 20 62 65 |gerd, ju|st to be|
|00000920| 20 73 61 66 65 2e 20 20 | 4d 6f 76 69 6e 67 20 74 | safe.  |Moving t|
|00000930| 68 65 20 62 69 6e 61 72 | 79 20 66 72 6f 6d 0a 2f |he binar|y from./|
|00000940| 65 74 63 2f 66 69 6e 67 | 65 72 64 20 28 6f 72 20 |etc/fing|erd (or |
|00000950| 2f 75 73 72 2f 65 74 63 | 2f 66 69 6e 67 65 72 64 |/usr/etc|/fingerd|
|00000960| 2c 20 6f 72 20 2f 75 73 | 72 2f 65 74 63 2f 69 6e |, or /us|r/etc/in|
|00000970| 2e 66 69 6e 67 65 72 64 | 2c 20 64 65 70 65 6e 64 |.fingerd|, depend|
|00000980| 69 6e 67 20 6f 6e 20 77 | 68 61 74 0a 73 79 73 74 |ing on w|hat.syst|
|00000990| 65 6d 20 79 6f 75 27 72 | 65 20 75 73 69 6e 67 29 |em you'r|e using)|
|000009a0| 20 74 6f 20 73 6f 6d 65 | 70 6c 61 63 65 20 65 6c | to some|place el|
|000009b0| 73 65 20 77 69 6c 6c 20 | 63 65 72 74 61 69 6e 6c |se will |certainl|
|000009c0| 79 20 64 6f 20 74 68 65 | 20 74 72 69 63 6b 2e 20 |y do the| trick. |
|000009d0| 20 54 68 65 72 65 0a 69 | 73 20 61 20 73 6f 75 72 | There.i|s a sour|
|000009e0| 63 65 20 66 69 78 20 66 | 6f 72 20 74 68 69 73 2c |ce fix f|or this,|
|000009f0| 20 62 75 74 20 6e 6f 20 | 62 69 6e 61 72 79 20 66 | but no |binary f|
|00000a00| 69 78 20 61 74 20 70 72 | 65 73 65 6e 74 2e 20 20 |ix at pr|esent.  |
|00000a10| 54 68 65 20 6c 61 74 65 | 73 74 20 34 2e 33 42 53 |The late|st 4.3BS|
|00000a20| 44 2d 0a 74 61 68 6f 65 | 20 73 6f 75 72 63 65 73 |D-.tahoe| sources|
|00000a30| 20 66 6f 72 20 66 69 6e | 67 65 72 64 20 77 65 72 | for fin|gerd wer|
|00000a40| 65 20 6a 75 73 74 20 70 | 6f 73 74 65 64 20 74 6f |e just p|osted to|
|00000a50| 20 63 6f 6d 70 2e 62 75 | 67 73 2e 34 62 73 64 2e | comp.bu|gs.4bsd.|
|00000a60| 75 63 62 2d 66 69 78 65 | 73 20 6c 61 73 74 0a 6e |ucb-fixe|s last.n|
|00000a70| 69 67 68 74 2e 20 20 41 | 20 6d 6f 72 65 20 72 65 |ight.  A| more re|
|00000a80| 63 65 6e 74 20 76 65 72 | 73 69 6f 6e 20 6f 66 20 |cent ver|sion of |
|00000a90| 74 68 65 20 6e 65 77 20 | 66 69 6e 67 65 72 64 20 |the new |fingerd |
|00000aa0| 70 6f 73 74 69 6e 67 20 | 69 73 20 72 65 70 72 6f |posting |is repro|
|00000ab0| 64 75 63 65 64 20 62 65 | 6c 6f 77 2e 0a 0a 20 20 |duced be|low...  |
|00000ac0| 20 49 6e 20 74 65 72 6d | 73 20 6f 66 20 66 69 78 | In term|s of fix|
|00000ad0| 69 6e 67 20 74 68 65 20 | 73 65 6e 64 6d 61 69 6c |ing the |sendmail|
|00000ae0| 20 70 72 6f 62 6c 65 6d | 2c 20 74 68 65 72 65 20 | problem|, there |
|00000af0| 61 72 65 20 61 20 6e 75 | 6d 62 65 72 20 6f 66 0a |are a nu|mber of.|
|00000b00| 61 70 70 72 6f 61 63 68 | 65 73 2e 20 20 46 69 72 |approach|es.  Fir|
|00000b10| 73 74 2c 20 79 6f 75 20 | 63 61 6e 20 75 73 65 20 |st, you |can use |
|00000b20| 73 74 72 69 6e 67 73 20 | 2d 6f 20 74 6f 20 66 69 |strings |-o to fi|
|00000b30| 6e 64 20 6f 75 74 20 77 | 68 65 72 65 20 74 68 65 |nd out w|here the|
|00000b40| 20 73 74 72 69 6e 67 0a | 22 64 65 62 75 67 22 20 | string.|"debug" |
|00000b50| 28 61 6c 6c 20 6c 6f 77 | 65 72 20 63 61 73 65 29 |(all low|er case)|
|00000b60| 20 72 65 73 69 64 65 73 | 20 69 6e 20 79 6f 75 72 | resides| in your|
|00000b70| 20 73 65 6e 64 6d 61 69 | 6c 20 62 69 6e 61 72 79 | sendmai|l binary|
|00000b80| 2e 20 20 59 6f 75 20 63 | 61 6e 20 74 68 65 6e 20 |.  You c|an then |
|00000b90| 61 64 62 0a 74 68 61 74 | 20 73 74 72 69 6e 67 20 |adb.that| string |
|00000ba0| 74 6f 20 73 61 79 20 22 | 73 68 6f 77 71 22 2e 20 |to say "|showq". |
|00000bb0| 20 41 6c 74 65 72 6e 61 | 74 69 76 65 6c 79 2c 20 | Alterna|tively, |
|00000bc0| 79 6f 75 20 63 61 6e 20 | 72 75 6e 20 65 6d 61 63 |you can |run emac|
|00000bd0| 73 20 6f 6e 20 74 68 65 | 0a 73 65 6e 64 6d 61 69 |s on the|.sendmai|
|00000be0| 6c 20 62 69 6e 61 72 79 | 2c 20 73 65 61 72 63 68 |l binary|, search|
|00000bf0| 20 66 6f 72 20 64 65 62 | 75 67 2c 20 61 6e 64 20 | for deb|ug, and |
|00000c00| 6d 61 6b 65 20 74 68 65 | 20 63 68 61 6e 67 65 20 |make the| change |
|00000c10| 62 79 20 68 61 6e 64 2e | 20 20 48 65 72 65 27 73 |by hand.|  Here's|
|00000c20| 20 6d 6f 72 65 0a 69 6e | 66 6f 72 6d 61 74 69 6f | more.in|formatio|
|00000c30| 6e 20 6f 6e 20 74 68 65 | 20 73 6f 75 72 63 65 20 |n on the| source |
|00000c40| 61 6e 64 20 62 69 6e 61 | 72 79 20 70 61 74 63 68 |and bina|ry patch|
|00000c50| 65 73 3b 20 69 66 20 79 | 6f 75 20 64 6f 6e 27 74 |es; if y|ou don't|
|00000c60| 20 68 61 76 65 20 61 20 | 22 64 65 62 75 67 22 0a | have a |"debug".|
|00000c70| 73 74 72 69 6e 67 20 69 | 6e 20 79 6f 75 72 20 73 |string i|n your s|
|00000c80| 65 6e 64 6d 61 69 6c 2c | 20 79 6f 75 27 72 65 20 |endmail,| you're |
|00000c90| 2a 70 72 6f 62 61 62 6c | 79 2a 20 4f 4b 2e 2e 2e |*probabl|y* OK...|
|00000ca0| 0a 0a 09 2d 53 74 65 76 | 65 0a 0a 53 70 6f 6b 65 |...-Stev|e..Spoke|
|00000cb0| 6e 3a 20 53 74 65 76 65 | 20 4d 69 6c 6c 65 72 20 |n: Steve| Miller |
|00000cc0| 20 20 20 44 6f 6d 61 69 | 6e 3a 20 73 74 65 76 65 |   Domai|n: steve|
|00000cd0| 40 6d 69 6d 73 79 2e 75 | 6d 64 2e 65 64 75 20 20 |@mimsy.u|md.edu  |
|00000ce0| 20 20 55 55 43 50 3a 20 | 75 75 6e 65 74 21 6d 69 |  UUCP: |uunet!mi|
|00000cf0| 6d 73 79 21 73 74 65 76 | 65 0a 50 68 6f 6e 65 3a |msy!stev|e.Phone:|
|00000d00| 20 2b 31 2d 33 30 31 2d | 34 35 34 2d 31 38 30 38 | +1-301-|454-1808|
|00000d10| 20 20 55 53 50 53 3a 20 | 55 4d 49 41 43 53 2c 20 |  USPS: |UMIACS, |
|00000d20| 55 6e 69 76 2e 20 6f 66 | 20 4d 61 72 79 6c 61 6e |Univ. of| Marylan|
|00000d30| 64 2c 20 43 6f 6c 6c 65 | 67 65 20 50 61 72 6b 2c |d, Colle|ge Park,|
|00000d40| 20 4d 44 20 32 30 37 34 | 32 0a 0a 2d 2d 2d 2d 2d | MD 2074|2..-----|
|00000d50| 20 20 48 65 72 65 27 73 | 20 74 68 65 20 73 65 6e |  Here's| the sen|
|00000d60| 64 6d 61 69 6c 20 62 69 | 6e 61 72 79 20 70 61 74 |dmail bi|nary pat|
|00000d70| 63 68 20 69 6e 66 6f 72 | 6d 61 74 69 6f 6e 2e 20 |ch infor|mation. |
|00000d80| 20 54 6f 20 66 69 78 20 | 74 68 65 20 73 6f 75 72 | To fix |the sour|
|00000d90| 63 65 73 2c 0a 6a 75 73 | 74 20 70 75 74 20 61 6e |ces,.jus|t put an|
|00000da0| 20 23 69 66 64 65 66 20 | 6e 6f 74 64 65 66 20 2e | #ifdef |notdef .|
|00000db0| 2e 2e 20 23 65 6e 64 69 | 66 20 61 72 6f 75 6e 64 |.. #endi|f around|
|00000dc0| 20 74 68 65 20 22 64 65 | 62 75 67 22 20 63 6f 6d | the "de|bug" com|
|00000dd0| 6d 61 6e 64 20 73 74 72 | 69 6e 67 20 69 6e 0a 73 |mand str|ing in.s|
|00000de0| 72 76 72 73 6d 74 70 2e | 63 2e 20 20 49 67 6e 6f |rvrsmtp.|c.  Igno|
|00000df0| 72 65 20 74 68 65 20 66 | 69 6e 67 65 72 20 73 74 |re the f|inger st|
|00000e00| 75 66 66 20 69 6e 20 74 | 68 69 73 20 70 6f 73 74 |uff in t|his post|
|00000e10| 69 6e 67 2e 20 20 0a 2d | 2d 2d 2d 2d 0a 44 61 74 |ing.  .-|----.Dat|
|00000e20| 65 3a 20 54 68 75 2c 20 | 33 20 4e 6f 76 20 38 38 |e: Thu, |3 Nov 88|
|00000e30| 20 31 39 3a 31 39 3a 32 | 33 20 50 53 54 0a 46 72 | 19:19:2|3 PST.Fr|
|00000e40| 6f 6d 3a 20 62 6f 73 74 | 69 63 25 6f 6b 65 65 66 |om: bost|ic%okeef|
|00000e50| 66 65 2e 42 65 72 6b 65 | 6c 65 79 2e 45 44 55 40 |fe.Berke|ley.EDU@|
|00000e60| 75 63 62 76 61 78 2e 42 | 65 72 6b 65 6c 65 79 2e |ucbvax.B|erkeley.|
|00000e70| 45 44 55 20 28 4b 65 69 | 74 68 20 42 6f 73 74 69 |EDU (Kei|th Bosti|
|00000e80| 63 29 0a 54 6f 3a 20 74 | 63 70 2d 69 70 40 73 72 |c).To: t|cp-ip@sr|
|00000e90| 69 2d 6e 69 63 2e 61 72 | 70 61 0a 53 75 62 6a 65 |i-nic.ar|pa.Subje|
|00000ea0| 63 74 3a 20 56 69 72 75 | 73 20 70 6f 73 74 69 6e |ct: Viru|s postin|
|00000eb0| 67 20 23 33 0a 0a 0a 53 | 75 62 6a 65 63 74 3a 20 |g #3...S|ubject: |
|00000ec0| 56 69 72 75 73 20 70 6f | 73 74 69 6e 67 20 23 33 |Virus po|sting #3|
|00000ed0| 0a 49 6e 64 65 78 3a 20 | 75 73 72 2e 6c 69 62 2f |.Index: |usr.lib/|
|00000ee0| 73 65 6e 64 6d 61 69 6c | 2f 73 72 63 2f 73 72 76 |sendmail|/src/srv|
|00000ef0| 72 73 6d 74 70 2e 63 20 | 34 42 53 44 0a 0a 44 65 |rsmtp.c |4BSD..De|
|00000f00| 73 63 72 69 70 74 69 6f | 6e 3a 0a 09 54 68 65 20 |scriptio|n:..The |
|00000f10| 72 65 63 65 6e 74 6c 79 | 20 72 65 70 6f 72 74 65 |recently| reporte|
|00000f20| 64 20 77 6f 72 6d 20 61 | 70 70 65 61 72 73 20 74 |d worm a|ppears t|
|00000f30| 6f 20 61 6c 73 6f 20 62 | 65 20 75 73 69 6e 67 20 |o also b|e using |
|00000f40| 74 68 65 0a 09 66 69 6e | 67 65 72 64 28 38 29 20 |the..fin|gerd(8) |
|00000f50| 64 61 65 6d 6f 6e 20 74 | 6f 20 65 6e 74 65 72 20 |daemon t|o enter |
|00000f60| 73 79 73 74 65 6d 73 2e | 20 20 48 65 72 65 27 73 |systems.|  Here's|
|00000f70| 20 61 20 66 69 78 2e 0a | 0a 09 54 68 65 20 70 72 | a fix..|..The pr|
|00000f80| 65 76 69 6f 75 73 20 70 | 61 74 63 68 20 66 6f 72 |evious p|atch for|
|00000f90| 20 73 65 6e 64 6d 61 69 | 6c 28 38 29 20 6f 6e 20 | sendmai|l(8) on |
|00000fa0| 62 69 6e 61 72 79 20 73 | 79 73 74 65 6d 73 20 6f |binary s|ystems o|
|00000fb0| 6e 6c 79 0a 09 70 72 65 | 76 65 6e 74 65 64 20 74 |nly..pre|vented t|
|00000fc0| 68 65 20 63 75 72 72 65 | 6e 74 20 61 74 74 61 63 |he curre|nt attac|
|00000fd0| 6b 65 72 2e 20 20 54 68 | 65 20 61 74 74 61 63 68 |ker.  Th|e attach|
|00000fe0| 65 64 20 70 61 74 63 68 | 20 66 69 78 65 73 0a 09 |ed patch| fixes..|
|00000ff0| 74 68 65 20 70 72 6f 62 | 6c 65 6d 2e 0a 46 69 78 |the prob|lem..Fix|
|00001000| 3a 0a 09 52 65 2d 70 61 | 74 63 68 20 73 65 6e 64 |:..Re-pa|tch send|
|00001010| 6d 61 69 6c 2e 20 20 52 | 65 63 6f 6d 70 69 6c 65 |mail.  R|ecompile|
|00001020| 20 61 6e 64 20 72 65 69 | 6e 73 74 61 6c 6c 20 74 | and rei|nstall t|
|00001030| 68 65 20 61 74 74 61 63 | 68 65 64 0a 09 73 6f 75 |he attac|hed..sou|
|00001040| 72 63 65 20 66 6f 72 20 | 66 69 6e 67 65 72 64 28 |rce for |fingerd(|
|00001050| 38 29 2e 0a 0a 09 48 65 | 72 65 27 73 20 61 20 73 |8)....He|re's a s|
|00001060| 63 72 69 70 74 20 74 6f | 20 72 65 70 61 74 63 68 |cript to| repatch|
|00001070| 20 73 65 6e 64 6d 61 69 | 6c 2e 20 20 4e 6f 74 65 | sendmai|l.  Note|
|00001080| 2c 20 74 68 69 73 20 6f | 6e 6c 79 20 61 70 70 6c |, this o|nly appl|
|00001090| 69 65 73 0a 09 74 6f 20 | 62 69 6e 61 72 79 20 73 |ies..to |binary s|
|000010a0| 79 73 74 65 6d 73 2c 20 | 69 66 20 79 6f 75 20 68 |ystems, |if you h|
|000010b0| 61 76 65 20 73 6f 75 72 | 63 65 20 79 6f 75 20 73 |ave sour|ce you s|
|000010c0| 68 6f 75 6c 64 20 68 61 | 76 65 20 72 65 63 6f 6d |hould ha|ve recom|
|000010d0| 70 69 6c 65 64 0a 09 61 | 6e 64 20 72 65 69 6e 73 |piled..a|nd reins|
|000010e0| 74 61 6c 6c 65 64 20 69 | 74 20 61 6c 72 65 61 64 |talled i|t alread|
|000010f0| 79 2e 20 20 59 6f 75 20 | 73 68 6f 75 6c 64 20 73 |y.  You |should s|
|00001100| 74 61 72 74 20 77 69 74 | 68 20 74 68 65 20 6f 72 |tart wit|h the or|
|00001110| 69 67 69 6e 61 6c 0a 09 | 73 65 6e 64 6d 61 69 6c |iginal..|sendmail|
|00001120| 20 62 69 6e 61 72 79 2c | 20 4e 4f 54 20 74 68 65 | binary,| NOT the|
|00001130| 20 62 69 6e 61 72 79 20 | 74 68 61 74 20 79 6f 75 | binary |that you|
|00001140| 27 76 65 20 61 6c 72 65 | 61 64 79 20 70 61 74 63 |'ve alre|ady patc|
|00001150| 68 65 64 2e 0a 09 41 4e | 44 2c 20 52 45 4d 45 4d |hed...AN|D, REMEM|
|00001160| 42 45 52 2c 20 41 4c 57 | 41 59 53 20 53 41 56 45 |BER, ALW|AYS SAVE|
|00001170| 20 41 4e 20 45 58 54 52 | 41 20 43 4f 50 59 20 49 | AN EXTR|A COPY I|
|00001180| 4e 20 43 41 53 45 20 59 | 4f 55 20 4d 41 4b 45 20 |N CASE Y|OU MAKE |
|00001190| 41 0a 09 4d 49 53 54 41 | 4b 45 21 21 20 20 46 69 |A..MISTA|KE!!  Fi|
|000011a0| 6e 61 6c 6c 79 2c 20 69 | 66 20 79 6f 75 20 64 6f |nally, i|f you do|
|000011b0| 6e 27 74 20 66 69 6e 64 | 20 74 68 65 20 73 74 72 |n't find| the str|
|000011c0| 69 6e 67 20 60 60 64 65 | 62 75 67 27 27 20 69 6e |ing ``de|bug'' in|
|000011d0| 0a 09 79 6f 75 72 20 73 | 65 6e 64 6d 61 69 6c 20 |..your s|endmail |
|000011e0| 62 69 6e 61 72 79 2c 20 | 79 6f 75 20 64 6f 6e 27 |binary, |you don'|
|000011f0| 74 20 68 61 76 65 20 61 | 20 70 72 6f 62 6c 65 6d |t have a| problem|
|00001200| 3b 20 69 67 6e 6f 72 65 | 20 74 68 69 73 20 70 61 |; ignore| this pa|
|00001210| 74 63 68 2e 0a 09 54 68 | 69 73 20 70 61 74 63 68 |tch...Th|is patch|
|00001220| 20 65 73 73 65 6e 74 69 | 61 6c 6c 79 20 6d 61 6b | essenti|ally mak|
|00001230| 65 73 20 69 74 20 69 6d | 70 6f 73 73 69 62 6c 65 |es it im|possible|
|00001240| 20 74 6f 20 73 65 74 20 | 74 68 65 20 64 65 62 75 | to set |the debu|
|00001250| 67 20 66 6c 61 67 2e 0a | 0a 09 4e 6f 74 65 2c 20 |g flag..|..Note, |
|00001260| 79 6f 75 72 20 6f 66 66 | 73 65 74 73 20 61 73 20 |your off|sets as |
|00001270| 70 72 69 6e 74 65 64 20 | 62 79 20 61 64 62 20 6d |printed |by adb m|
|00001280| 61 79 20 76 61 72 79 21 | 20 20 43 6f 6d 6d 65 6e |ay vary!|  Commen|
|00001290| 74 73 20 61 72 65 0a 09 | 70 72 65 63 65 64 65 64 |ts are..|preceded|
|000012a0| 20 62 79 20 61 20 68 61 | 73 68 20 6d 61 72 6b 2c | by a ha|sh mark,|
|000012b0| 20 64 6f 6e 27 74 20 74 | 79 70 65 20 74 68 65 6d | don't t|ype them|
|000012c0| 20 69 6e 2c 20 6e 6f 72 | 20 65 78 70 65 63 74 20 | in, nor| expect |
|000012d0| 61 64 62 0a 09 74 6f 20 | 70 72 69 6e 74 20 74 68 |adb..to |print th|
|000012e0| 65 6d 20 6f 75 74 2e 20 | 20 41 6c 73 6f 2c 20 77 |em out. | Also, w|
|000012f0| 65 27 72 65 20 61 67 61 | 69 6e 20 75 73 69 6e 67 |e're aga|in using|
|00001300| 20 73 74 72 69 6e 67 73 | 28 31 29 20 74 6f 20 66 | strings|(1) to f|
|00001310| 69 6e 64 0a 09 74 68 65 | 20 64 65 63 69 6d 61 6c |ind..the| decimal|
|00001320| 20 6f 66 66 73 65 74 20 | 69 6e 20 74 68 65 20 66 | offset |in the f|
|00001330| 69 6c 65 20 6f 66 20 63 | 65 72 74 61 69 6e 20 73 |ile of c|ertain s|
|00001340| 74 72 69 6e 67 73 2e 20 | 20 54 6f 20 66 69 6e 64 |trings. | To find|
|00001350| 20 0a 09 6f 75 74 20 69 | 66 20 79 6f 75 72 20 73 | ..out i|f your s|
|00001360| 74 72 69 6e 67 73 28 31 | 29 20 63 6f 6d 6d 61 6e |trings(1|) comman|
|00001370| 64 20 70 72 69 6e 74 73 | 20 6f 66 66 73 65 74 73 |d prints| offsets|
|00001380| 20 69 6e 20 64 65 63 69 | 6d 61 6c 2c 20 0a 09 70 | in deci|mal, ..p|
|00001390| 75 74 20 38 20 63 6f 6e | 74 72 6f 6c 20 28 6e 6f |ut 8 con|trol (no|
|000013a0| 6e 2d 70 72 69 6e 74 61 | 62 6c 65 29 20 63 68 61 |n-printa|ble) cha|
|000013b0| 72 61 63 74 65 72 73 20 | 69 6e 20 61 20 66 69 6c |racters |in a fil|
|000013c0| 65 2c 20 66 6f 6c 6c 6f | 77 65 64 0a 09 62 79 20 |e, follo|wed..by |
|000013d0| 66 6f 75 72 20 70 72 69 | 6e 74 61 62 6c 65 20 63 |four pri|ntable c|
|000013e0| 68 61 72 61 63 74 65 72 | 73 2c 20 61 6e 64 20 74 |haracter|s, and t|
|000013f0| 68 65 6e 20 75 73 65 20 | 73 74 72 69 6e 67 73 28 |hen use |strings(|
|00001400| 31 29 20 74 6f 20 66 69 | 6e 64 0a 09 74 68 65 20 |1) to fi|nd..the |
|00001410| 6f 66 66 73 65 74 20 6f | 66 20 79 6f 75 72 20 66 |offset o|f your f|
|00001420| 6f 75 72 20 70 72 69 6e | 74 61 62 6c 65 20 63 68 |our prin|table ch|
|00001430| 61 72 61 63 74 65 72 73 | 2e 20 20 49 66 20 74 68 |aracters|.  If th|
|00001440| 65 20 6f 66 66 73 65 74 | 0a 09 69 73 20 60 60 38 |e offset|..is ``8|
|00001450| 27 27 2c 20 69 74 27 73 | 20 75 73 69 6e 67 20 64 |'', it's| using d|
|00001460| 65 63 69 6d 61 6c 2c 20 | 69 66 20 69 74 27 73 20 |ecimal, |if it's |
|00001470| 60 60 31 30 27 27 20 69 | 74 27 73 20 75 73 69 6e |``10'' i|t's usin|
|00001480| 67 20 6f 63 74 61 6c 2e | 0a 09 0a 09 09 53 63 72 |g octal.|.....Scr|
|00001490| 69 70 74 20 73 74 61 72 | 74 65 64 20 6f 6e 20 54 |ipt star|ted on T|
|000014a0| 68 75 20 4e 6f 76 20 20 | 33 20 31 38 3a 34 35 3a |hu Nov  |3 18:45:|
|000014b0| 33 34 20 31 39 38 38 0a | 23 20 66 69 6e 64 20 74 |34 1988.|# find t|
|000014c0| 68 65 20 64 65 63 69 6d | 61 6c 20 6f 66 66 73 65 |he decim|al offse|
|000014d0| 74 20 6f 66 20 74 68 65 | 20 73 74 72 69 6e 67 73 |t of the| strings|
|000014e0| 20 60 60 64 65 62 75 67 | 27 27 20 61 6e 64 20 60 | ``debug|'' and `|
|000014f0| 60 73 68 6f 77 71 27 27 | 20 69 6e 20 74 68 65 0a |`showq''| in the.|
|00001500| 23 20 73 65 6e 64 6d 61 | 69 6c 20 62 69 6e 61 72 |# sendma|il binar|
|00001510| 79 2e 0a 09 09 6f 6b 65 | 65 66 66 65 3a 74 6d 70 |y....oke|effe:tmp|
|00001520| 20 7b 32 7d 20 73 74 72 | 69 6e 67 73 20 2d 6f 20 | {2} str|ings -o |
|00001530| 2d 61 20 73 65 6e 64 6d | 61 69 6c 20 7c 20 65 67 |-a sendm|ail | eg|
|00001540| 72 65 70 20 27 64 65 62 | 75 67 7c 73 68 6f 77 71 |rep 'deb|ug|showq|
|00001550| 27 0a 09 09 30 30 39 37 | 30 34 30 20 73 68 6f 77 |'...0097|040 show|
|00001560| 71 0a 09 09 30 30 39 37 | 30 34 36 20 64 65 62 75 |q...0097|046 debu|
|00001570| 67 0a 09 09 6f 6b 65 65 | 66 66 65 3a 74 6d 70 20 |g...okee|ffe:tmp |
|00001580| 7b 33 7d 20 61 64 62 20 | 2d 77 20 73 65 6e 64 6d |{3} adb |-w sendm|
|00001590| 61 69 6c 0a 23 20 73 65 | 74 20 74 68 65 20 6d 61 |ail.# se|t the ma|
|000015a0| 70 2c 20 74 68 65 6e 20 | 73 65 74 20 74 68 65 20 |p, then |set the |
|000015b0| 64 65 66 61 75 6c 74 20 | 72 61 64 69 78 20 74 6f |default |radix to|
|000015c0| 20 62 61 73 65 20 31 30 | 0a 09 09 3f 6d 20 30 20 | base 10|...?m 0 |
|000015d0| 30 78 66 66 66 66 66 66 | 66 66 20 30 0a 09 09 30 |0xffffff|ff 0...0|
|000015e0| 74 31 30 24 64 0a 09 09 | 72 61 64 69 78 3d 31 30 |t10$d...|radix=10|
|000015f0| 20 62 61 73 65 20 74 65 | 6e 0a 23 20 63 68 65 63 | base te|n.# chec|
|00001600| 6b 20 74 6f 20 6d 61 6b | 65 20 73 75 72 65 20 74 |k to mak|e sure t|
|00001610| 68 61 74 20 73 74 72 69 | 6e 67 73 28 31 29 20 77 |hat stri|ngs(1) w|
|00001620| 61 73 20 72 69 67 68 74 | 2c 20 61 6e 64 20 74 68 |as right|, and th|
|00001630| 65 6e 20 66 69 6e 64 20 | 6f 75 74 20 77 68 61 74 |en find |out what|
|00001640| 0a 23 20 74 68 65 20 62 | 79 74 65 20 70 61 74 74 |.# the b|yte patt|
|00001650| 65 72 6e 20 66 6f 72 20 | 60 60 73 68 6f 77 71 27 |ern for |``showq'|
|00001660| 27 20 69 73 20 66 6f 72 | 20 79 6f 75 72 20 6d 61 |' is for| your ma|
|00001670| 63 68 69 6e 65 2e 20 20 | 4e 6f 74 65 20 74 68 61 |chine.  |Note tha|
|00001680| 74 20 61 64 62 0a 23 20 | 70 72 69 6e 74 73 20 6f |t adb.# |prints o|
|00001690| 75 74 20 74 68 61 74 20 | 62 79 74 65 20 70 61 74 |ut that |byte pat|
|000016a0| 74 65 72 6e 20 69 6e 20 | 48 45 58 21 0a 09 09 39 |tern in |HEX!...9|
|000016b0| 37 30 34 30 3f 73 0a 09 | 09 39 37 30 34 30 3a 09 |7040?s..|.97040:.|
|000016c0| 09 73 68 6f 77 71 0a 09 | 09 39 37 30 34 30 3f 58 |.showq..|.97040?X|
|000016d0| 78 0a 09 09 39 37 30 34 | 30 3a 09 09 37 33 36 38 |x...9704|0:..7368|
|000016e0| 36 66 37 37 09 37 31 30 | 30 0a 23 20 63 68 65 63 |6f77.710|0.# chec|
|000016f0| 6b 20 6f 6e 20 74 68 65 | 20 73 74 72 69 6e 67 20 |k on the| string |
|00001700| 60 60 64 65 62 75 67 27 | 27 2c 20 74 68 65 6e 2c |``debug'|', then,|
|00001710| 20 6f 76 65 72 77 72 69 | 74 65 20 74 68 65 20 66 | overwri|te the f|
|00001720| 69 72 73 74 20 66 6f 75 | 72 20 62 79 74 65 73 2c |irst fou|r bytes,|
|00001730| 0a 23 20 6d 6f 76 65 20 | 75 70 20 34 20 62 79 74 |.# move |up 4 byt|
|00001740| 65 73 2c 20 61 6e 64 20 | 74 68 65 6e 20 6f 76 65 |es, and |then ove|
|00001750| 72 77 69 74 65 20 74 68 | 65 20 6c 61 73 74 20 74 |rwite th|e last t|
|00001760| 77 6f 20 62 79 74 65 73 | 20 77 69 74 68 20 74 68 |wo bytes| with th|
|00001770| 65 20 62 79 74 65 0a 23 | 20 70 61 74 74 65 72 6e |e byte.#| pattern|
|00001780| 20 73 65 65 6e 20 61 62 | 6f 76 65 20 66 6f 72 20 | seen ab|ove for |
|00001790| 60 60 73 68 6f 77 71 27 | 27 2e 0a 09 09 39 37 30 |``showq'|'....970|
|000017a0| 34 36 3f 73 0a 09 09 39 | 37 30 34 36 3a 09 09 64 |46?s...9|7046:..d|
|000017b0| 65 62 75 67 0a 09 09 39 | 37 30 34 36 3f 57 20 30 |ebug...9|7046?W 0|
|000017c0| 78 37 33 36 38 36 66 37 | 37 0a 09 09 39 37 30 34 |x73686f7|7...9704|
|000017d0| 36 3a 09 09 31 36 38 34 | 33 36 35 39 34 31 09 3d |6:..1684|365941.=|
|000017e0| 09 31 39 33 36 32 32 34 | 31 31 39 0a 09 09 2e 2b |.1936224|119....+|
|000017f0| 34 0a 09 09 2e 3f 77 20 | 30 78 37 31 30 30 0a 09 |4....?w |0x7100..|
|00001800| 09 39 37 30 35 30 3a 09 | 09 32 36 33 36 38 09 3d |.97050:.|.26368.=|
|00001810| 09 32 38 39 32 38 0a 23 | 20 63 68 65 63 6b 20 74 |.28928.#| check t|
|00001820| 6f 20 6d 61 6b 65 20 73 | 75 72 65 20 77 65 20 77 |o make s|ure we w|
|00001830| 72 6f 74 65 20 6f 75 74 | 20 74 68 65 20 63 6f 72 |rote out| the cor|
|00001840| 72 65 63 74 20 73 74 72 | 69 6e 67 2e 0a 09 09 39 |rect str|ing....9|
|00001850| 37 30 34 36 3f 73 0a 09 | 09 39 37 30 34 36 3a 09 |7046?s..|.97046:.|
|00001860| 09 73 68 6f 77 71 0a 09 | 09 6f 6b 65 65 66 66 65 |.showq..|.okeeffe|
|00001870| 3a 74 6d 70 20 7b 34 7d | 20 73 74 72 69 6e 67 73 |:tmp {4}| strings|
|00001880| 20 2d 6f 20 2d 61 20 73 | 65 6e 64 6d 61 69 6c 20 | -o -a s|endmail |
|00001890| 7c 20 65 67 72 65 70 20 | 27 64 65 62 75 67 7c 73 || egrep |'debug|s|
|000018a0| 68 6f 77 71 27 0a 09 09 | 30 30 39 37 30 34 30 20 |howq'...|0097040 |
|000018b0| 73 68 6f 77 71 0a 09 09 | 30 30 39 37 30 34 36 20 |showq...|0097046 |
|000018c0| 73 68 6f 77 71 0a 09 09 | 6f 6b 65 65 66 66 65 3a |showq...|okeeffe:|
|000018d0| 74 6d 70 20 7b 35 7d 0a | 09 09 73 63 72 69 70 74 |tmp {5}.|..script|
|000018e0| 20 64 6f 6e 65 20 6f 6e | 20 54 68 75 20 4e 6f 76 | done on| Thu Nov|
|000018f0| 20 20 33 20 31 38 3a 34 | 37 3a 34 32 20 31 39 38 |  3 18:4|7:42 198|
|00001900| 38 0a 0a 0a 28 45 64 69 | 74 6f 72 27 73 20 6e 6f |8...(Edi|tor's no|
|00001910| 74 65 3a 20 20 74 68 65 | 20 63 6f 72 72 75 70 74 |te:  the| corrupt|
|00001920| 65 64 20 76 65 72 73 69 | 6f 6e 20 6f 66 20 66 69 |ed versi|on of fi|
|00001930| 6e 67 65 72 64 20 68 61 | 73 20 62 65 65 6e 20 72 |ngerd ha|s been r|
|00001940| 65 6d 6f 76 65 64 20 66 | 72 6f 6d 0a 74 68 69 73 |emoved f|rom.this|
|00001950| 20 6d 65 73 73 61 67 65 | 2c 20 61 73 20 69 74 20 | message|, as it |
|00001960| 77 6f 6e 27 74 20 64 6f | 20 79 6f 75 20 61 6e 79 |won't do| you any|
|00001970| 20 67 6f 6f 64 2c 20 61 | 6e 79 77 61 79 2e 20 20 | good, a|nyway.  |
|00001980| 53 44 4d 29 0a          |                         |SDM).   |        |
+--------+-------------------------+-------------------------+--------+--------+