Alfred Huger
VP of Engineering
SecurityFocus.com
---------- Forwarded message ----------
Date: Sun, 2 Jan 2000 17:12:14 -0500 (EST)
From: Peter W <[EMAIL PROTECTED]>
To: Alfred Huger <[EMAIL PROTECTED]>
Subject: Re: Y2K bug in Shadow IDS
At 1:00pm Jan 2, 2000, Alfred Huger wrote:
> I changed the top of 'sensor/variables.ph' into
>
> # We need various timestamps all over the place
> @T = localtime;
> if ($T[5] > 99) {
> $T[5] -= 100;
> }
Or
@T = localtime;
$T[5] %= 100;
> By the way, the Shadow perl scripts also use /tmp a lot with
> predictable file names, so local exploits are possible,
> but this is more of a Bugtraq issue I guess.
Fun.
