Subject: Re: TCPCTL_IDENT (Was: CVS commit: src/etc)
To: Simon Burge <firstname.lastname@example.org>
From: Matthias Scheler <email@example.com>
Date: 05/02/2003 15:33:15
On Fri, May 02, 2003 at 11:24:58PM +1000, Simon Burge wrote:
> Indeed no - I've checked that "nobody" and "nobody:nobody" works.
That's what I expected.
> (Does the former imply that later as "nobody" is the group of the "nobody"
> I don't have any idea of security implications of this.
I don't know a way to abuse that (yet). But maybe it could be utilizied
to exploit another security whole by finding out the port which is
used by another application easily.
Matthias Scheler http://scheler.de/~matthias/