[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [Full-disclosure] *BSD banner INT overflow vulnerability

To: dead code crew <dead.code.crew@xxxxxxx>
Subject: Re: [Full-disclosure] *BSD banner INT overflow vulnerability
From: Sean Comeau <scomeau@xxxxxxxxxxxxxx>
Date: Wed, 22 Nov 2006 04:50:10 -0800

On Wed, Nov 22, 2006 at 12:25:46PM +0300, dead code crew wrote:
> 
>  %uname -sir
>  FreeBSD 6.1-RELEASE GENERIC
>  %gdb banner
>  (gdb) r -w 17000000
>  Program received signal SIGSEGV, Segmentation fault.
>  0x01010101 in ?? ()
> 

This doesn't crash banner on OpenBSD, and even if it did who
cares?  What would anyone accomplish by making this setuid
root?

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/

Follow-Ups:
- Re: [Full-disclosure] *BSD banner INT overflow vulnerability
  - From: J.A. Terranson

References:
- [Full-disclosure] *BSD banner INT overflow vulnerability
  - From: dead code crew

Prev by Date: Re: [Full-disclosure] GNU tar directory traversal
Next by Date: [Full-disclosure] *BSD banner INT overflow vulnerability
Previous by thread: [Full-disclosure] *BSD banner INT overflow vulnerability
Next by thread: [Full-disclosure] *BSD banner INT overflow vulnerability
Index(es):
- Date
- Thread