/usr/bin/doscmd on BSDI

jayDS9.AXSNY.NET

• Messages sorted by: [ date ][ thread ][ subject ][ author ]
• Next message: Mixter: "Lynx 2.8 overflow"
• Previous message: X-Force: "ISS Security Advisory: LDAP Buffer overflow against Microsoft"
• Next in thread: Warner Losh: "Re: /usr/bin/doscmd on BSDI"

hi,
        I found (I use the term loosely) a buffer overflow
in /usr/bin/doscmd distributed with BSDI 3.1..

for example :

finally:~ $ /usr/bin/doscmd `perl -e 'print "A" x 1015'`
Segmentation fault

doscmd is setuid executable as well.

I have not "tested" this out on anything other than 2 BSDI 3.1 (x86)
machines. Insight from other types is greatly appreciated.

bye

-jay

• Next message: Mixter: "Lynx 2.8 overflow"
• Previous message: X-Force: "ISS Security Advisory: LDAP Buffer overflow against Microsoft"
• Next in thread: Warner Losh: "Re: /usr/bin/doscmd on BSDI"