Bugtraq mailing list archives
Re: Internet Worm
From: jim () Tadpole COM (jim () Tadpole COM)
Date: Tue, 18 Oct 1994 13:57:56 -0500
Sun (at least in SunOS 4) didn't do any "mucking about" with libresolv and YP in libc. ypserv(e) is responsible for consulting the DNS, if the NIS maps (host.byname/byaddr) are setup with a special key/value pair. Things are different in Solaris. The resolv+ package shows exactly how to replace routines in the libc.so/sa files such that the gethostbyname()/gethostbyaddr() lookups happen via the DNS (or NIS, or just the /etc/host file, it depends on how you configure things). Similar things could be done for any routine in libc, or any other shared library, for that matter. [Unfortunately, 'rcp' and everything in /sbin (SunOS 4 again) are staticly linked, so if 'rcp' is important to you and you want to use the resolv+ functionality, you'll have to find the BSD source and build a copy for yourself.] Replacing ruserok() and friends should be trivial. Jim
Current thread:
- Re: Internet Worm, (continued)
- Re: Internet Worm Julian Assange (Oct 18)
- PLEASE UNSUBSCRIBE ME Mark McPherson (Oct 17)
- Re: Internet Worm Pat Myrto (Oct 17)
- Re: Internet Worm David Miller (Oct 17)
- PLEASE UNSUBSCRIBE Vatsal P. Sonecha (Oct 17)
- Re: Internet Worm Fred Kuhns (Oct 18)
- Internet Worm Source Code Michael S. Hines (Oct 17)
- rhosts (+ REQUEST SNMP bug) James Seng (Oct 17)
- Re: Internet Worm George Hodson (Oct 17)
- Re: Internet Worm Mark W. Eichin (Oct 18)
- Re: Internet Worm jim () Tadpole COM (Oct 18)
- Re: Internet Worm Icarus Sparry (Oct 18)
- Re: Internet Worm F. L. Charles Seeger III (Oct 18)
- Re: Internet Worm jim () Tadpole COM (Oct 18)
- Re: Internet Worm F. L. Charles Seeger III (Oct 19)
- Re: Internet Worm Darragh Nagle (Oct 19)
- Re: Internet Worm Gene Spafford (Oct 19)
- Re: Internet Worm jim () Tadpole COM (Oct 19)
- Re: Internet Worm F. L. Charles Seeger III (Oct 20)
- Re: Internet Worm smb () research att com (Oct 19)
- R utilities, addresses, etc. Charles Howes (Oct 20)
(Thread continues...)