mjr@cthulhu.welch.jhu.edu (Marcus J. Ranum) (01/14/89)
We're running 4.0, and if I rlogin from our VAX (ultrix) to my Sun as 'root', I get a closed connection on the VAX, and a core dump on the Sun, apparently from login. From my limited familiarity with adb: >core file = core -- program ``login'' >SIGSEGV 11: segmentation violation >?() at ed8ba68 >?() at 0 >?() at 0 >?(0xeffffdd) at 3608 >?(0x3,0xeffffbc,0xeffffcc) at 241a I can't think of anything unusually nasty in our configuration - our hosts.equiv contained the VAX's name (fully-qualified - is there a buffer overrun somewhere ?) as does /.rhosts. (As an aside, for those who have been following the argument in comp.unix.wizards about keeping a shadow password file this raises the fact that any deamons, etc, that access that shadow have to be more bug-free than a lot of the code we have been seeing from various sources lately.) --mjr();