Bugtraq mailing list archives
Re: [ Hackerslab bug_paper ] Linux dump buffer overflow
From: lamagra () HACKERMAIL NET (Lamagra Argamal)
Date: Fri, 3 Mar 2000 19:53:41 -0000
i checked RedHat's 5.2 dump (dump-0.3) and it doesn't seem vunerable in an exploitable way. There's a minor heap-overflow though: snipped from optr.c msg(const char *fmt, ...) { ....... va_start(ap, fmt); #else va_start(ap); #endif (void) vfprintf(stderr, fmt, ap); (void) fflush(stdout); (void) fflush(stderr); (void) vsprintf(lastmsg, fmt, ap); va_end(ap); ...... } Lastmsg is a global variable size = 100 -lamagra http://lamagra.seKure.de http://www.b0f.com Send someone a cool Dynamitemail flashcard greeting!! And get rewarded. GO AHEAD! http://cards.dynamitemail.com/index.php3?rid=fc-41
Current thread:
- @Stake Advisory: Microsoft Office 2000 ClipArt Vulnerablity, (continued)
- @Stake Advisory: Microsoft Office 2000 ClipArt Vulnerablity Weld Pond (Mar 07)
- Re: @Stake Advisory: Microsoft Office 2000 ClipArt Vulnerablity Dustin Miller (Mar 07)
- Re: @Stake Advisory: Microsoft Office 2000 ClipArt Vulnerablity Weld Pond (Mar 08)
- Problem with MacOS 9 Multiple Users and Netware AFP Don Lambert (Mar 03)
- Re: Potential security problem with mtr Rogier Wolff (Mar 03)
- Re: Potential security problem with mtr Viktor Fougstedt (Mar 04)
- Re: Potential security problem with mtr - fixed Jeff Dafoe (Mar 06)
- userv (security boundary tool) 1.0.0 released Ian Jackson (Mar 06)