Re: Bug, possible hole in nslookup, various operating systems

[rpc <h () ckz org>]

> > > I found a strange behavior in the nslookup command, and was able to
>  > > reproduce it in several different platforms. I do not have deep knowledge
>  > > of the inner working of nslookup, but the message I got seemed a bit
>  > > suspicious, and I decided to report it before someone can find a way to
>  > > exploit it.
>  >

This is because nslookup uses a lexical analyzer generated by flex to parse
user input. This is not a security bug. flex expects input to be terminated
with an EOF marker. While the error it reports in this circumstance looks
threatening, it's merely saying that the lexer was terminated before an EOF was
received.

--rpc