On Tue, Jan 01, 2002 at 04:34:57AM -0500, Erick Perez (Asesor de Seguridad Informatica) wrote: > Sirs, > I am trying to find references (examples, etc) of the recently found > /bin/login vulnerability reported by X-Force a few days ago. > So far I have exhausted my resources. > > Any help will be appreciated and I might be able to code a script with the > information obtained.
I did write a plugin which detects it (at least the solaris variant - as sun's patch is kinda clumsy, it may not work on other platforms). See binlogin_overflow_*.nasl (on http://scripts.nessus.org or with nessus-update-plugins). -- Renaud
