OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
Bugtraq archives for 4th quarter (Oct-Dec) 1998: Re: buffer overflow in dbadmin

Re: buffer overflow in dbadmin

duke (dukeVIPER.NET.AU)
Fri, 9 Oct 1998 03:02:53 +0000 

>

hi,

> dbadmin.c:    strcpy(op_temp,curField->name);
> dbadmin.c:      strcat(rec_new,curField->name);

both op_temp and rec_new are malloc()'d so they are safe enough. dbadmin
still looks exploitable however from:

    strcat(qbuf,thetable);

qbuf is not malloc'd but is a global variable.

-- Mark