Bugtraq mailing list archives

Re: [ Hackerslab bug_paper ] Linux dump buffer overflow

From: jshaw () INSYNC NET (Joe Shaw)
Date: Wed, 1 Mar 2000 23:34:12 -0600


This is the same behavior as all my OpenBSD 2.6-Release boxes.  /sbin/dump
is also not SUID/SGID on these systems by default.

--
Joseph W. Shaw - jshaw () insync net
Free UNIX advocate - "I hack, therefore I am."

On Wed, 1 Mar 2000, Brett Lymn wrote:

NetBSD-current, at least, is not vulnerable to this.  It just returns
a filename too long error.  I do not have a release version of NetBSD
to try this on at the moment.

Current thread:

Re: [ Hackerslab bug_paper ] Linux dump buffer overflow Brett Lymn (Feb 29)
- Re: [ Hackerslab bug_paper ] Linux dump buffer overflow Joe Shaw (Mar 01)
- <Possible follow-ups>
- Re: [ Hackerslab bug_paper ] Linux dump buffer overflow H D Moore (Feb 29)
- Re: [ Hackerslab bug_paper ] Linux dump buffer overflow Derek Callaway (Mar 01)
  - Foundry Networks ServerIron sequence predictability fix soon to be available Andrew van der Stock (Mar 01)
  - Re: [ Hackerslab bug_paper ] Linux dump buffer overflow Przemyslaw Frasunek (Mar 01)
    - Re: [ Hackerslab bug_paper ] Linux dump buffer overflow Ronald Huizer (Mar 04)
    - OpenLinux 2.3: rpm_query harikiri (Mar 04)
- Re: [ Hackerslab bug_paper ] Linux dump buffer overflow Eugene Teo (Mar 02)
  - Re: [ Hackerslab bug_paper ] Linux dump buffer overflow Derek Callaway (Mar 02)
    - Re: [ Hackerslab bug_paper ] Linux dump buffer overflow Przemyslaw Frasunek (Mar 03)
  - Potential security problem with mtr Viktor Fougstedt (Mar 03)

(Thread continues...)