RE: Vi buffer overflow

["Lord, Steve (ISS London)" <SLord () iss net>]

Hmmm.... vi is the default editor on a lot of systems, not sure about SCO.
However, the default editor is launched by suid programs (e.g crontab -
sorry, can't think of anything more useful it's early here ;).

Steve Lord
Consultant
Internet Security Systems

-----Original Message-----
From: KF
To: vuln-dev () security-focus com; recon () snosoft com
Sent: 06/11/01 22:22
Subject: Vi buffer overflow

Not sure how big of a deal either of these are due to the fact that they
are not suid... any thoughts?

# vi `perl -e 'print "A" x 9000'` 
Memory fault - core dumped 

# du `perl -e 'print "A" x 9000'`
Memory fault - core dumped


# uname -a
SCO_SV scosysv 3.2 5.0.6 i386

-KF