🚀 go-pugleaf

We're running 4.0, and if I rlogin from our VAX (ultrix) to my Sun as
'root', I get a closed connection on the VAX, and a core dump on the Sun,
apparently from login. From my limited familiarity with adb:

>core file = core -- program ``login''
>SIGSEGV	11: segmentation violation
>?() at ed8ba68
>?() at 0
>?() at 0
>?(0xeffffdd) at	3608
>?(0x3,0xeffffbc,0xeffffcc) at 241a

I can't think of anything unusually nasty in our configuration - our
hosts.equiv contained the VAX's name (fully-qualified - is there a buffer
overrun somewhere ?) as does /.rhosts.

(As an aside, for those who have been following the argument in
comp.unix.wizards about keeping a shadow password file this raises the
fact that any deamons, etc, that access that shadow have to be more
bug-free than a lot of the code we have been seeing from various sources
lately.)

--mjr();