Nmap Security Scanner
*Intro
*Ref Guide
*Install Guide
*Download
*Changelog
*Book
*Docs
Security Lists
*Nmap Hackers
*Nmap Dev
*Bugtraq
*Full Disclosure
*Pen Test
*Basics
*More
Security Tools
*Pass crackers
*Sniffers
*Vuln Scanners
*Web scanners
*Wireless
*Exploitation
*Packet crafters
*More
Site News
Site Search:
Exploit World
Advertising
About/Contact
Credits
Sponsors:
edgeos



Bugtraq: Re: identd hole?

Re: identd hole?

From: der Mouse <mouse_at_Collatz.McRCIM.McGill.EDU>
Date: Tue, 16 Jul 1996 12:41:08 -0400

> its possible that its an atoi() (or more properly strtol()) bug..
> Most people run identd as root, this means that if someone happens to
> overflow a buffer (which is easily done with atoi())

Um, how can you overflow a buffer with atoi() or strtol()? Neither one
writes to any buffer anywhere; atoi() doesn't write anything but its
return value, and strtol() writes only the pointer and its return
value.

What am I missing?

                                        der Mouse

                            mouse_at_collatz.mcrcim.mcgill.edu
                    01 EE 31 F6 BB 0C 34 36 00 F3 7C 5A C1 A0 67 1D
Received on Jul 16 1996

[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]
edgeos