Vulnerability Development mailing list archives

Re: more locale problems?


From: Erik Tayler <erik () digitaloffense net>
Date: Tue, 21 Nov 2000 23:17:13 -0500

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

While on the topic of variables, attached is an exploit
pertaining a different environment variable.

I know it isn't related to the original
posting, but I thought it would be
appropriate to let people have a look at this.
(If they haven't already seen it).
I'm not sure if it was previously released.
(I know the vulnerability itself is old).

I haven't thoroughly tested it, however
it should work on:
     SuSE 6.0 - ?
     SuSE 6.4
     SuSE 7.0
     Red Hat 6.2
       other versions?
     Debian 2.2
       other versions?

It's just another cruddy exploit, nothing
special. It wasn't written by me.

Erik Tayler
http://www.digitaloffense.net

-----BEGIN PGP SIGNATURE-----
Version: PGPfreeware 6.5.3 for non-commercial use <http://www.pgp.com>

iQA/AwUBOhtIyU0pQlPl0B0AEQKFZwCg6lCKvxwciq2Ko25yAJf1U/t7s+MAnR1w
f4f/X2ylKZ/xaQa6V2BujsWC
=hQ7B
-----END PGP SIGNATURE-----

Attachment: mnt.c
Description:


Current thread: