Full Disclosure mailing list archives

Re: [security] Re: FAKE: RedHat: Buffer Overflow in "ls" and "mkdir"

From: brett () custom-tech net (Brett Campbell)
Date: Mon, 25 Oct 2004 14:07:27 -0700

On Sun, Oct 24, 2004 at 06:18:41PM -0700, Andrew Farmer wrote:
<snip>

I did a quickie analysis of the program (which is basically just 
distributed as source!).

<snip>

when did you get a hold of the tarball? they must've yanked the record
for www.fedora-redhat.com ... it can't be resolved in any way.

pretty interesting (and pathetic) anyways, nice detective work.

-- 
[ Brett R. Campbell ]
 -> Configuration Management / Systems Administration
 -> Collaborative Agent Design Research Center
 -> California Polytechnic State University, SLO, CA
 http://www.cadrc.calpoly.edu/frameset_content/content_about_us.html

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html

Current thread:

FAKE: RedHat: Buffer Overflow in "ls" and "mkdir" Hugo van der Kooij (Oct 24)
- Re: FAKE: RedHat: Buffer Overflow in "ls" and "mkdir" Harry Hoffman (Oct 24)
  - Re: FAKE: RedHat: Buffer Overflow in "ls" and "mkdir" Andrew Farmer (Oct 24)
    - Re: [security] Re: FAKE: RedHat: Buffer Overflow in "ls" and "mkdir" Brett Campbell (Oct 26)
  - Re: FAKE: RedHat: Buffer Overflow in "ls" and "mkdir" Vincent Archer (Oct 25)
- <Possible follow-ups>
- FAKE: RedHat: Buffer Overflow in "ls" and "mkdir" Feher Tamas (Oct 25)
- Re: FAKE: RedHat: Buffer Overflow in "ls" and "mkdir" Stephen Jimson (Oct 26)