Vulnerability Development mailing list archives
Re: character injecting on linux console
From: Robert van der Meulen <rvdm () wiretrip org>
Date: Sat, 8 Dec 2001 19:24:54 +0100
Hi, Quoting Doru Petrescu (pdoru () kappa ro):
2. Can someone explain to me what is happening ? is this a bug in the kernel code that handles terminal output ? can we make it do something else ? (like overwriting memory, etc ...)
These are just regular escape characters; the same kind that allow colors in your shell, character movement, more intelligent drawing. Lots of things you can do with that. Most unix tools have safeguards to disallow execution of arbitrary escape sequences; you will probably find this doesn't work in emails as well. 'mutt' and 'pine' for example, will not carelessly echo these. The same kind of sequences are used by some textmode irc clients, and even mpg123, to change xterm titles. Greets, Robert -- Linux Generation encrypted mail preferred. finger rvdm () debian org for my GnuPG/PGP key. Insanity is hereditary. You get it from your kids.
Current thread:
- Re: character injecting on linux console, (continued)
- Re: character injecting on linux console Michael R. Rudel (Dec 08)
- Re: character injecting on linux console Michael Greenberg (Dec 08)
- Re: character injecting on linux console Michael R. Rudel (Dec 08)
- Re: character injecting on linux console Doru Petrescu (Dec 08)
- Re: character injecting on linux console Michael Greenberg (Dec 08)
- Re: character injecting on linux console Michal Zalewski (Dec 08)
- Re: character injecting on linux console Robert van der Meulen (Dec 08)
- Re: character injecting on linux console Nelson Brito (Dec 09)
- Re: character injecting on linux console Michal Zalewski (Dec 09)
- Re: character injecting on linux console Valdis . Kletnieks (Dec 10)
- Re: character injecting on linux console Michal Zalewski (Dec 10)
- Re: character injecting on linux console Michael R. Rudel (Dec 08)
- Re: character injecting on linux console Robert van der Meulen (Dec 08)
- Re: character injecting on linux console Valkai Elod (Dec 08)
- RE: character injecting on linux console DFx (Dec 08)
- RE: character injecting on linux console Dom De Vitto (Dec 09)