[16668] in bugtraq
Re: expoit for locale format string bug (Solaris 2.x)
daemon@ATHENA.MIT.EDU (Ejovi Nuwere)
Fri Sep 8 16:49:00 2000
Mime-Version: 1.0
Content-Type: TEXT/PLAIN; charset=US-ASCII
Message-Id: <Pine.GSO.4.05.10009081224400.14076-100000@ejovi.net>
Date: Fri, 8 Sep 2000 12:30:38 -0400
Reply-To: Ejovi Nuwere <ejovi@EJOVI.NET>
From: Ejovi Nuwere <ejovi@EJOVI.NET>
X-To: Warning3 <warning3@mail.com>
To: BUGTRAQ@SECURITYFOCUS.COM
In-Reply-To: <200009081132.TAA17021@intra.nsfocus.com>
Posting broken code to a full discloser mailing list is as lame as
mispelling "exploit" in your subject line. If you do not want people using
your code, don't post it!
It will be a matter of minutes before someone is giving out a working
version on IRC and a day before someone will post a working version to
bugtraq. Its not worth my time to look at code I know to be broken.
On Fri, 8 Sep 2000, Warning3 wrote:
> * Script kiddies: you should modify this code
> * slightly by yourself. :)