OpenSSH 2.9p* channel_lookup() off by one exploit

Notes:
-Will not work on OpenSSH 3.0.* because of its different storage method of channels
-targets not very accurate.. brute forcing probably only viable method
-if there are problems with brute forcing.. chage the BF_DELTA to a smaller value or
increase the range.
-script kids out there.. to mass hack
char commands[] = "cd /; echo; uname -a; id ;echo; "
add commands to download and install your favorite rootkit!

Compilation: 
-untar OpenSSH-2.9p2 source..
-copy supplied files to your openssh directory, overwrite ssh.c and sshconnect2.c
-run ./configure
-add hack.o to the objects list for ssh in your SSHOBJS in your Makefile
-make
-follow instructions given by your ssh executeable
-for brute forcing.. compile bf.c

A good friend of mine name named ron1n for some odd reason seems to be having a 
hard time meeeting the right guy. Heres some info on him, so if any of you out 
there are interested you can reach him at shellcode@hotmail.com or on ircsnet.net 
as ronin.

Name: Mitchell
Gender: Male
Age: 19
Location: Sydney, Australia
Height: 5'8''
Body Type: fit
Ethnic Background: caucasian (white)
Smoking Habits: only cock
Drinking Habits: only semen
Have Children: yes I've 'had' a few..
Want Children: yes, yes I do..
Education: college
Annual Income: prefer not to say
Religion: I was born a snake handler and I'll die a snake handler..
My idea of romance includes: cat tranquilizers and champaigne enamas..
Interests: seven inch lines off eight inch cocks..
Hobbies & Other Interests: 
i played a major role in developing the rpc.statd technique!@#$!
Favorite Pickup line: 
Why dont we go back to my place and I give you a ........................ORGASM!

Greets:  
ryan, numarca, snare, humble, master1, dwalrus, return, xt, ronin
matthew (I bite my thumb at you!)
snow (you made the exploit for phonesex scene what it is.. never forget that)
APACH3 (you truely are living the sweet life, on social security and IRC)
#segfault@ircsnet (home of many hackers and sexual deviants alike)
THE metary (even though TESO hates you for leaking me warez, you'll always be
my third favorite fat Canadian)
Brian S. McWilliams (my favorite yellow journalist)
The Bush Administration (Way to trample on the Constitution, it really does just
get in the way of doing business)
The War on Terrorism (when are we goning to stop funding every forigner with a
gun whose victory will be favorable for our companys.. Bid Laden, Saddam Hussein.
Hey thats 2/3 of the axis of evil!)

p.s It really troubles me that sites like www.allcutekids.com www.chantellemodel.com 
and www.little-virgins.com are permited to post pictures of children in sexually 
suggestive positions and nothing is done about it. Now I'm sure most of you will use
my code for evil, frankly I dont give a shit what you do with it. If you find 
these, dare I say people, as putrid as I do....... Well use your own judgement..
