Subject: Re: Code-red worm (snicker snicker...)
To: Hubert Feyrer <hubert@feyrer.de>
From: Michael Kukat <michael@unixiron.org>
List: netbsd-users
Date: 08/02/2001 20:09:08
Hi !

On Thu, 2 Aug 2001, Hubert Feyrer wrote:
> On Unix, just because you can overflow a buffer doesn't mean the CPU
> can run the code you feed it.

But don't think you are safe, because your Alpha can't execute the i386-code
of the script kiddies. Interpreter scripts (like usual shell scripts) just run,
if the buffer overflow allows execution of code. So just start with "#!/bin/sh"
and it will run on every platform, can modify /etc/inetd.conf, HUP it, and
voila, your shell on some port is open...

...Michael

-- 
visit http://www.bsdfans.org/   Home network powered by: NetBSD OpenBSD FreeBSD
Solaris HP-UX IRIX AIX MUNIX Tru64 Ultrix VMS SINIX Dolphin_Unix OpenStep MacOS