OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
cipher.exe overflow

From: moran zavdi (moraniamhotmail.com)
Date: Mon Apr 21 2003 - 08:59:42 CDT

Hi,

there is a problem with cipher.exe.
overflow occurs when you add string of more than 256 chars.
example:
c:\> cipher.exe <A * 257>

program will crash.

anyway Microsoft response was:
"Thank you for your feedback. We are definitely commited to fixing this
issue in Cipher.exe.
We've had several people look into this issue, and the biggest impact we've
found that it has is a crash of the file which results in a local denial of
service in the file itself."

Regards,

Moran Zavdi
DataSEC
http://www.data-sec.com

_________________________________________________________________
The new MSN 8: smart spam protection and 2 months FREE*
http://join.msn.com/?page=features/junkmail