Vulnerability Development mailing list archives

Re: Bash Blues.

From: TerraTrans Security <NimaDeus () pandora be>
Date: Thu, 13 Feb 2003 18:29:05 +0100

On Thursday 13 February 2003 15:26, uk2sec () oakey no-ip com wrote:


      example:        `perl -e 'print "*/*" x 3500'`
                      <bash crashes>


Just out of curiosity I tried it on my slackware 8.1 box 

nimadeus@hera:~$ uname -a
Linux hera 2.4.18 #4 Fri May 31 01:25:31 PDT 2002 i686 unknown
nimadeus@hera:~$ bash --version
GNU bash, version 2.05a.0(1)-release (i386-slackware-linux-gnu)
Copyright 2001 Free Software Foundation, Inc.
nimadeus@hera:~$ 

after running `perl -e 'print "*/*" x 3500'` in bash it crashed too. 


-- 
- Joris Vink
TerraTrans Security & DNS Admin
http://www.terratrans.net

Current thread:

Bash Blues. uk2sec (Feb 13)
- Re: Bash Blues. Andrew Walkingshaw (Feb 13)
  - Re: Bash Blues. Kurt Seifried (Feb 14)
  - Re: Bash Blues. Dack (Feb 14)
- Re: Bash Blues. Roland Postle (Feb 14)
  - glibc glob_filename() recurse call stack overflow (Re[2]: Bash Blues) 3APA3A (Feb 15)
    - Re: glibc glob_filename() recurse call stack overflow (Re[2]: Bash Blues) Vladamir Shmirnov (Feb 15)
    - Re: glibc glob_filename() recurse call stack overflow (Re[2]: Bash Blues) Roland Postle (Feb 16)
    - Re: glibc glob_filename() recurse call stack overflow (Re[2]: Bash Blues) spacewalker (Feb 16)
- Re: Bash Blues. TerraTrans Security (Feb 14)
  - A different bash blues admin (Feb 15)
    - RE: A different bash blues Adam Gilmore (Feb 16)
- RE: Bash Blues. Adam Gilmore (Feb 14)
- Re: Bash Blues. Peter Pentchev (Feb 14)