Bugtraq mailing list archives
Re: Y2K bug in Shadow IDS (fwd)
From: ah () SECURITYFOCUS COM (Alfred Huger)
Date: Sun, 2 Jan 2000 14:13:38 -0800
Alfred Huger VP of Engineering SecurityFocus.com ---------- Forwarded message ---------- Date: Sun, 2 Jan 2000 17:12:14 -0500 (EST) From: Peter W <peterw () usa net> To: Alfred Huger <ah () SECURITYFOCUS COM> Subject: Re: Y2K bug in Shadow IDS At 1:00pm Jan 2, 2000, Alfred Huger wrote:
I changed the top of 'sensor/variables.ph' into # We need various timestamps all over the place @T = localtime; if ($T[5] > 99) { $T[5] -= 100; }
Or @T = localtime; $T[5] %= 100;
By the way, the Shadow perl scripts also use /tmp a lot with predictable file names, so local exploits are possible, but this is more of a Bugtraq issue I guess.
Fun.
Current thread:
- Re: Y2K bug in Shadow IDS (fwd) Alfred Huger (Jan 02)