full-disclosure - Microsoft Windows and *nix Telnet Port Number Argument Obfuscation

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Date: Sat Jun 11 18:53:54 2005
From: devdas at dvb.homelinux.org (Devdas Bhagat)
Subject: Microsoft Windows and *nix Telnet Port Number
	Argument Obfuscation

On 09/06/05 09:58 -0400, Kristian Hermansen wrote:
> On Wed, 2005-06-08 at 15:04 +1200, Nick FitzGerald wrote:
> > This has been known since Adam was a cowboy.
> 
> Although I don't believe that your claim is unlikely, it would have been
> nice to post a link to the original discovery to back it up.  Everyone
> that I have showed this to, personally, has not seen it before.  And,

Ask any C programmer what happens to integers that get incremented to
values greater than the maximum size they can contain. This wrapping
around of integers is known for a few years. You may also want to
understand the effect of passing a leading 0 in the field, particularly
when it comes to IP address obfuscation.

I hope this helps.

Devdas Bhagat