Full Disclosure mailing list archives

Re: *BSD banner INT overflow vulnerability

From: Sean Comeau <scomeau () cansecwest com>
Date: Wed, 22 Nov 2006 04:50:10 -0800

On Wed, Nov 22, 2006 at 12:25:46PM +0300, dead code crew wrote:


 %uname -sir
 FreeBSD 6.1-RELEASE GENERIC
 %gdb banner
 (gdb) r -w 17000000
 Program received signal SIGSEGV, Segmentation fault.
 0x01010101 in ?? ()


This doesn't crash banner on OpenBSD, and even if it did who
cares?  What would anyone accomplish by making this setuid
root?

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/

Current thread:

*BSD banner INT overflow vulnerability dead code crew (Nov 22)
- Re: *BSD banner INT overflow vulnerability Sean Comeau (Nov 22)
  - Message not available
    - *BSD banner INT overflow vulnerability Tyop? (Nov 22)
    - Re: *BSD banner INT overflow vulnerability endrazine (Nov 22)
  - Re: *BSD banner INT overflow vulnerability J.A. Terranson (Nov 25)
- <Possible follow-ups>
- Re: *BSD banner INT overflow vulnerability daylasoul (Nov 26)
  - Re: *BSD banner INT overflow vulnerability Nick FitzGerald (Nov 26)
    - Re: *BSD banner INT overflow vulnerability Tyop? (Nov 26)
    - Re: *BSD banner INT overflow vulnerability Nick FitzGerald (Nov 26)