OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
From: KF (dotslashsnosoft.com)
Date: Wed Feb 27 2002 - 12:36:31 CST

  • Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

    Just got home had a sec to investigate further...
    <snip> from core.c

      char buf[BIG_BUF]; ...
       while(*argv) {
          struct listserver_cmdarg *tmp = find_cmdarg(argv[0]);
          if(!tmp) {
              sprintf(buf, "Unrecognized command line argument '%s'.",
    argv[0]);
              internal_error(buf);

    -KF

    KF wrote:

    > http://online.securityfocus.com/bid/4176 states a Remote issue...
    >
    > bugtraq id 4176
    > object
    > class Boundary Condition Error
    > cve CVE-MAP-NOMATCH
    > remote Yes
    > local No
    >
    >
    > Which is it local or remote ... or both? Is this (see below) even the
    > same issue?
    > [rootlinuxppc <mailto:rootlinuxppc> src]# ./ecartis `perl -e 'print
    > "A" x 9000'`
    > [rootlinuxppc <mailto:rootlinuxppc> src]#
    > ^-------- ecartis is sneaky... trying to hide segfaults from me.
    >
    > [rootlinuxppc <mailto:rootlinuxppc> src]# gdb ./ecartis
    > (gdb) r `perl -e 'print "A" x 9000'`
    > Starting program: //root/ecartis-1.0.0/src//./ecartis `perl -e 'print
    > "A" x 9000'`
    >
    > Program received signal SIGSEGV, Segmentation fault
    > 0x0fe6fcf8 in getenv () from /lib/libc.so.6
    >
    > (gdb) bt
    > #0 0x0fe6fcf8 in getenv () from /lib/libc.so.6
    > #1 0x0fedb590 in adjtime () from /lib/libc.so.6
    > #2 0x0fedc3cc in adjtime () from /lib/libc.so.6
    > #3 0x0fed8a08 in localtime () from /lib/libc.so.6
    > #4 0x1000b5f4 in get_date (buffer=0x7fffbf88 "\017÷\205È", len=80,
    > now=1014824239) at core.c:1262
    > #5 0x1000bd14 in error_heading () at forms.c:162
    > #6 0x100091f0 in internal_error (
    > message=0x7fffd078 "Unrecognized command line argument '", 'A'
    > <repeats 164 times>...) at core.c:428
    > #7 0x1000a888 in main (argc=2, argv=0x7fffd508) at core.c:959
    > #8 0x41414141 in ?? ()
    >
    > -KF
    >
    >
    >

    attached mail follows:


    Just got home had a sec to investigate further...
    <snip> from core.c

       char buf[BIG_BUF];
       ...
        while(*argv) {
           struct listserver_cmdarg *tmp = find_cmdarg(argv[0]);
           if(!tmp) {
               sprintf(buf, "Unrecognized command line argument '%s'.",
    argv[0]);
               internal_error(buf);

    -KF

    KF wrote:

    > http://online.securityfocus.com/bid/4176 states a Remote issue...
    >
    > bugtraq id 4176
    > object
    > class Boundary Condition Error
    > cve CVE-MAP-NOMATCH
    > remote Yes
    > local No
    >
    >
    > Which is it local or remote ... or both? Is this (see below) even the
    > same issue?
    > [rootlinuxppc src]# ./ecartis `perl -e 'print "A" x 9000'`
    > [rootlinuxppc src]#
    > ^-------- ecartis is sneaky... trying to hide segfaults from me.
    >
    > [rootlinuxppc src]# gdb ./ecartis
    > (gdb) r `perl -e 'print "A" x 9000'`
    > Starting program: /root/ecartis-1.0.0/src/./ecartis `perl -e 'print
    > "A" x 9000'`
    >
    > Program received signal SIGSEGV, Segmentation fault
    > 0x0fe6fcf8 in getenv () from /lib/libc.so.6
    >
    > (gdb) bt
    > #0 0x0fe6fcf8 in getenv () from /lib/libc.so.6
    > #1 0x0fedb590 in adjtime () from /lib/libc.so.6
    > #2 0x0fedc3cc in adjtime () from /lib/libc.so.6
    > #3 0x0fed8a08 in localtime () from /lib/libc.so.6
    > #4 0x1000b5f4 in get_date (buffer=0x7fffbf88 "\017÷\205È", len=80,
    > now=1014824239) at core.c:1262
    > #5 0x1000bd14 in error_heading () at forms.c:162
    > #6 0x100091f0 in internal_error (
    > message=0x7fffd078 "Unrecognized command line argument '", 'A'
    > <repeats 164 times>...) at core.c:428
    > #7 0x1000a888 in main (argc=2, argv=0x7fffd508) at core.c:959
    > #8 0x41414141 in ?? ()
    >
    > -KF
    >
    >
    >