Re: krb5 1.1.1

[emsi () IT PL (Mariusz Woloszyn)]

On Wed, 31 May 2000, Trevor Schroeder wrote:

> > I was trying to play with kerberos bugs, but the binary I downloaded
> > from redhat.com does not want to segfault. The BT posts were saying that
> > default RH 6.2 without kerberos stuff contains v4rcp that is suid root
> > and segfaults when tested by sample exploit.  Does anyone have
> > vulnerable sources and/or binaries?
>
> http://web.mit.edu/kerberos/www/ might be a good place to start. ;)
I cannot download sources. The sites keeps telling me that I'm not from US
and some bullshit illegal stuff.. :/

--
Mariusz Wo³oszyn
Internet Security Specialist, Internet Partners, GTS Poland