Vulnerability Development mailing list archives

Re: /usr/bin/ddate buffer overflow


From: poke <poke () OLY SILVERLINK NET>
Date: Sun, 11 Feb 2001 14:08:23 -0800

I found a buffer overflow in /usr/bin/ddate (version unknown)
"converts Gregorian dates to Discordian dates.." I tested it on my
Linux Box (RedHat 6.2) Look at this:

#ddate +AAAA...x 408
Segmentation Fault (core dumped)

I tested it on my RH6.2 box (2.2.16) and I saw no such thing.

-Chuck


--
 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
:"Condense fact from the vapor of nuance"| $s=$ARGV[0];$n='';while($s) :
: 25 -> ten.knilrevlis@wkcuhc            |  {$s=~s/(.$)//;$n=$n.$1;}   :
: 80 -> ekop/ten.knilrevlis.www//:ptth   |        print "$n\n";        :
 ----------------------------------------------------------------------
 Organization is the destruction of truth...


Current thread: