Vulnerability Development mailing list archives

Re: minor (?) mc bug

From: narr0w () LAM3R COM (Narr0w)
Date: Sat, 13 Nov 1999 22:39:02 +0200


MC 4.5.36 is too vulnerabel! (RH 6.0 hedwig, kernel 2.2.5-15)
Here are the bad lines:

FILE: src/treestore.c
LINE: 254,32
----------------------------------------------------------
     tree_store_add_entry (name);
     strcpy (oldname, name);
----------------------------------------------------------

FILE: src/treestore.c
LINE: 266,56
----------------------------------------------------------
      if (different){
       strcpy (oldname + common, different);
----------------------------------------------------------

FILE: src/treestore.c
LINE: 278,40
----------------------------------------------------------
     }
     strcpy (oldname, name);
----------------------------------------------------------

FILE: src/treestore.c
LINE: 340,8
----------------------------------------------------------

 fprintf (file, "%s\n", TREE_SIGNATURE);
----------------------------------------------------------

--
Narrow - (Legion2000) Russian Security Team

Current thread:

Re: minor (?) mc bug Narr0w (Nov 13)