Vulnerability Development mailing list archives
Re: telnet overflow
From: "Replugge [Rod]" <replugge () alcoholico org>
Date: 17 Feb 2002 18:40:09 +0100
Thats a bug on the client provided by kerberos, not the server, by the way you don't need 9000 A's, with 478 is enough... [replugge@localhost replugge]$ telnet localhost -l `perl -e "print 'X' x 478"` Trying 127.0.0.1... Connected to localhost.localdomain (127.0.0.1). Escape character is '^]'. Segmentation fault (core dumped) [replugge@localhost replugge]$ telnet localhost Trying 127.0.0.1... Connected to localhost.localdomain (127.0.0.1). Escape character is '^]'. Red Hat Linux release 7.1 (Seawolf) Kernel 2.4.9 on an i686 login: [replugge@localhost replugge]$ gdb telnet core GNU gdb Red Hat Linux (5.1-0.71) Copyright 2001 Free Software Foundation, Inc. GDB is free software, covered by the GNU General Public License, and you are welcome to change it and/or distribute copies of it under certain conditions. Type "show copying" to see the conditions. There is absolutely no warranty for GDB. Type "show warranty" for details. This GDB was configured as "i386-redhat-linux"...(no debugging symbols found)... Core was generated by `telnet localhost -l XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX'. Program terminated with signal 11, Segmentation fault. Reading symbols from /usr/kerberos/lib/libkrb4.so.2...(no debugging symbols found)...done. Loaded symbols for /usr/kerberos/lib/libkrb4.so.2 Reading symbols from /usr/kerberos/lib/libkrb5.so.3...(no debugging symbols found)...done. Loaded symbols for /usr/kerberos/lib/libkrb5.so.3 Reading symbols from /usr/kerberos/lib/libdes425.so.3...(no debugging symbols found)...done. Loaded symbols for /usr/kerberos/lib/libdes425.so.3 Reading symbols from /usr/kerberos/lib/libk5crypto.so.3...(no debugging symbols found)...done. Loaded symbols for /usr/kerberos/lib/libk5crypto.so.3 Reading symbols from /usr/kerberos/lib/libcom_err.so.3...(no debugging symbols found)...done. Loaded symbols for /usr/kerberos/lib/libcom_err.so.3 Reading symbols from /lib/libresolv.so.2...done. Loaded symbols for /lib/libresolv.so.2 Reading symbols from /lib/libtermcap.so.2...done. Loaded symbols for /lib/libtermcap.so.2 Reading symbols from /lib/i686/libc.so.6...done. Loaded symbols for /lib/i686/libc.so.6 Reading symbols from /lib/ld-linux.so.2...done. Loaded symbols for /lib/ld-linux.so.2 Reading symbols from /lib/libnss_files.so.2...done. Loaded symbols for /lib/libnss_files.so.2 #0 0x4014d090 in chunk_free (ar_ptr=0x40200b80, p=0x807a3e0) at malloc.c:3231 3231 malloc.c: No such file or directory. in malloc.c -- /* Rodrigo Gutierrez <rodrigo () trustix com> Trustix AS http://www.trustix.com */
Current thread:
- telnet overflow Aramis Orlando (Feb 17)
- Re: telnet overflow Larry W. Cashdollar (Feb 17)
- Re: telnet overflow J. Mallett (Feb 17)
- Re: telnet overflow Replugge [Rod] (Feb 17)
- Re: telnet overflow Larry W. Cashdollar (Feb 17)