Bugtraq mailing list archives

Re: DCC HiJacking patch for BitchX 75p1

From: andy () SS5 XECU NET (Andy Dills)
Date: Mon, 21 Dec 1998 16:27:13 -0500


On Sun, 18 Oct 1998, Alessio Orlandi wrote:

the ports will be quiet consecutive. Bad.. Bad... So.. let's add a
random value to the port returned by the system. All is now fixed.
Patch follows


Your patch changes the order, but there is still order.

You need to call srand() once before using rand, to ensure actual
randonimity.

Andy
--
System Administrator
XecuNet Internet Services

Current thread:

[In]security in USR TotalSwitch Adam Maloney (Dec 15)
- DCC HiJacking patch for BitchX 75p1 Alessio Orlandi (Oct 18)
  - Re: DCC HiJacking patch for BitchX 75p1 Andy Dills (Dec 21)
  - Re: DCC HiJacking patch for BitchX 75p1 Ben Winslow (Dec 21)
  - Re: DCC HiJacking patch for BitchX 75p1 mikey (Dec 22)
    - Re: DCC HiJacking patch for BitchX 75p1 YounGoat (Dec 22)
- Re: [In]security in USR TotalSwitch Lou Anschuetz (Dec 21)
- <Possible follow-ups>
- Re: [In]security in USR TotalSwitch Adam Maloney (Dec 21)