OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
Subject: Re: Securax Security Advisory: Windows98 contains a serious buffer overflow with long filenameextensions.
From: Su Wadlow (swadlowUTDALLAS.EDU)
Date: Sat Apr 22 2000 - 22:38:30 CDT

--On Saturday, April 22, 2000 6:00 PM -0500 Ron DuFresne
<dufresneWINTERNET.COM> wrote:

> Here's another question:
>
> how dos a dos prompt handle such files?

A dir shows the 'Buffer-overflow' file with a DOS name of __~1._--,
but it's full name is listed next to the time stamp. I can do a
'dir _á.á------Buffer-overflow-----------aaa*' (sorry, I'm not
typing in all 100 of those a's) and the filename shows up in the
listing.

Can't pass it as a parameter to, like, Notepad -- the buffer won't
go past 80 of the a's. And I can't delete it unless I use the *
wildcard -- again, the buffer won't accept all of the a's.

Otherwise, nothing unusual that I can see. 

--
Su Wadlow
swadlowutdallas.edu
    If I have to explain, you wouldn't understand . . . . :-)