|
Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com |
openssh buffer_append_space vulnerability
From: Joseph Blade (jblade27
comcast.net)
Date: Fri Jun 11 2004 - 08:30:00 CDT
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]
Good Morning To All,
Long time listener, first time caller.
Has anyone in the community seen any progress in the
buffer_append_space() vulnerability, which sets the buffer's
allocated int when it isn't allocated?
The last process that I used last September was to use data compression
to crash buffer_append(). When this was done, the data would cause a
crash before the space was allocated. At that point I had "deer in the
headlights"
If anyone has any ideas or knows of a poc in regards to this
vulnerability, I would greatly appreciate it.
Regards,
jb
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]