Re: Segfault in login on debian potatoR2

[The Itch <itchie () BSE DIE MS>]

On Fri, 9 Mar 2001, John wrote:

> I could not reproduce this. Could you give us some more
> information? Thanks.
>
> john@nbs:~$ cat /etc/debian_version
> 2.2

i can reproduce this on my mandrake 7.0 and redhat6.2 machine
by just starting /bin/login and press control d twice

[itchie@bse itchie]$ /bin/login
login:
login:
Segmentation fault
[itchie@bse itchie]$

gdb output:

(gdb) run
Starting program: /bin/login
login:
login:

Program received signal SIGSEGV, Segmentation fault.
strncpy (s1=0xbfffc894 "", s2=0x0, n=32) at
../sysdeps/generic/strncpy.c:41
41      ../sysdeps/generic/strncpy.c: No such file or directory.
(gdb)

dont think it is exploitable in any way though.


> Mike Fedyk wrote:
> > I don't know if this could be exploited is any way, but here's something
> > that I've seen.  This is on x86 on two machines and a ppc g3.
> >
> > #su
> > #login
> > login:
> > ^D
> > Segmentation fault
> >
> > Maybe you guys can check this more.
> >
> > Mike
> >
> > --
> > To UNSUBSCRIBE, email to debian-security-request () lists debian org
> > with a subject of "unsubscribe". Trouble? Contact
> > listmaster () lists debian org
>
> --
> The events which transpired five thousand years ago;
> Five years ago or five minutes ago, have determined
> what will happen five minutes from now; five years
> > From now or five thousand years from now.
> All history is a current event."
>
> - Dr John Henrik Clake -

--

- The Itch
        http://bse.die.ms