Vulnerability Development mailing list archives

Re: Local root through vulnerability in ping on linux.


From: Hue-Bond <hue () CYBERCHAT2000 COM>
Date: Mon, 21 Aug 2000 18:06:28 +0200

El lunes 21 de agosto de 2000 a la(s) 10:26:34 +0200, Michal Zalewski contaba:

What about 'traceroute -g 127.0.0.1 127.0.0.1' and other combinations
(depending on DNS entry and IP number representation, you can cause many
interesting memory dumps or some SEGVs on RH 6.2 Linux box and many other
boxes as well)?

         Yes, certainly. This is a Debian 2.2:

$ /usr/sbin/traceroute -g 127.0.0.1 127.0.0.1
traceroute to  (127.0.0.1), 30 hops max, 46 byte packets
traceroute: sendto: Argumento inválido
 1 traceroute: wrote WUJ¡9å 46 _ =1

         After this,  the chars in screen  got scrambled as if  you type
     ^V^N^M at the shell prompt. traceroute version 1.4a5-2 installed.


lcamtuf () tpi pl

-- 
 Just do it

David Serrano <cyberchat2000.com@hue>            Linux Registered User #87069
Hi! I'm a .signature virus! Copy me into your ~/.signature to help me spread!

Attachment: _bin
Description:


Current thread: