Re: Some revelations about ssh and stackpatch

peakkerberos.troja.mff.cuni.cz

• Messages sorted by: [ date ][ thread ][ subject ][ author ]
• Next message: Paul Leach: "Re: Summary of Printer Sharing and M1CR0S0FT Windows98"
• Previous message: Aleph One: "Re: SSHD Exploit"
• In reply to: M.C.Mar: "Some revelations about ssh and stackpatch"
• Next in thread: Alan J Rosenthal: "Re: Some revelations about ssh and stackpatch"

On Mon, 2 Nov 1998, M.C.Mar wrote:

> execl("/path_to_sshd/sshd","AAAAAA....[about 2000]",0);
> 'Cos I have stackpatch applied I saw something very strange in my
> logs:
> Nov  2 16:29:52 emsi <BUFFER OVERRUN ATTEMPT>[21738]: log: Server listening on port 22.
> Nov  2 16:29:52 emsi <BUFFER OVERRUN ATTEMPT>[21738]: log: Generating 768 bit RSA key.
> Nov  2 16:29:53 emsi <BUFFER OVERRUN ATTEMPT>[21738]: log: RSA key generation complete.

"<BUFFER OVERRUN ATTEMPT>" means that syslog() in (Linux) libc does not
like your argv[0], this is not a feature or bug or anything of sshd

--Pavel Kankovsky aka Peak  [ Boycott Microsoft--http://www.vcnet.com/bms ]
"You can't be truly paranoid unless you're sure they have already got you."

• Next message: Paul Leach: "Re: Summary of Printer Sharing and M1CR0S0FT Windows98"
• Previous message: Aleph One: "Re: SSHD Exploit"
• In reply to: M.C.Mar: "Some revelations about ssh and stackpatch"
• Next in thread: Alan J Rosenthal: "Re: Some revelations about ssh and stackpatch"