EIP-2026-100690

This is a historical writeup describing a buffer overflow vulnerability in the fingerd service, which was exploited by the Internet Worm in 1988. The document explains the use of the gets() function leading to a stack-based overflow and provides the VAX machine code used to execute /bin/sh.