[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: HP-UX finger possible security hole



Verified this on HP/UX 10.20 (B.10.20 A 9000/778).

The string length limit actually is 80 chars. 81 will cause segfault.
Interestingly, finger only prints 48 chars of the given username. But
it does not crash until the string is longer than 80 chars.

Bye,
Frank Hofmann