Bugtraq: Re: Buffer overflow in sperl5.003

[luyer () UCS UWA EDU AU (David Luyer)]

On Thu, 17 Apr 1997, Murphy wrote:
> Attached is the source for the exploit. Since it requires some work to
> be done to the compiled exploit (Stripping of 5 byte at the begining and
> end of the binary), the precompiled Linux x86 exploit can be found at
> http://www.ecst.csuchico.edu/~jtmurphy/localusers.html.
Note that the exploit tries offsets of 1170 to 1240.  Debian Linux with
sperl5.00307 requires a value of 1169 (and is vulnerable).

David.