Vulnerability Development mailing list archives

Re: man -K overflow


From: John <johns () TAMPABAY RR COM>
Date: Wed, 14 Feb 2001 18:14:26 -0500

This doesn't apply to Debian 2.3 because -K isn't a switch.
Though a valid switch is -k it's not affected by this.

john@nbs:/usr/local/$ man -K `perl -e '{print "A"x"8285"}'`
man: invalid option -- K

"enthh () FLASH NET" wrote:

man crashes when too many characters (around 8300) are passed thru the
-K option (tested in Slackware 7.0.0).

$ man -K `perl -e '{print "A"x"8285"}'`
Segmentation fault (core dumped)
$

it isnt exploitable, as the buffer is modified before it segv's.

enthh


Current thread: