Nmap Security Scanner
*Intro
*Ref Guide
*Install Guide
*Download
*Changelog
*Book
*Docs
Security Lists
*Nmap Hackers
*Nmap Dev
*Bugtraq
*Full Disclosure
*Pen Test
*Basics
*More
Security Tools
*Pass crackers
*Sniffers
*Vuln Scanners
*Web scanners
*Wireless
*Exploitation
*Packet crafters
*More
Site News
Site Search:
Exploit World
Advertising
About/Contact
Credits
Sponsors:




bugtraq logo Bugtraq mailing list archives

Can anyone verify a core dump on /sbin/mingetty
From: smackenz <smackenz () brad ac uk>
Date: Mon, 3 Dec 2001 14:46:31 +0000

*nix Issue - Anyone with 'mingetty':

After all the vi overflows, and wu-ftpd etc recently I thought I would have a 
sniff around a default redhat 7.1 box too see what I could find.  Anyway I  
managed to dump core on /sbin/mingetty and thought it would be worth 
reporting:

See below for the shell out:


[m0le () mainframe m0le]$ /sbin/mingetty `perl -e 'print "A"x9000'`
Segmentation fault (core dumped)
[m0le () mainframe m0le]$ id
uid=500(m0le) gid=500(m0le) groups=500(m0le)

(standard user account)


This only works by doing this:

/sbin/mingetty `perl -e 'print "A"x9000'`

when I did the following:

[m0le () mainframe m0le]$ cd /sbin
[m0le () mainframe /sbin]$ ./mingetty `perl -e 'print "A"x9000'`
Segmentation fault
[m0le () mainframe /sbin]$ 

No core dump....  It doesn't seem to dump in the sbin directory, however I've 
successfully dumped from several other dir's.

I am running a RedHat7.1.  I would appreciate some feedback from other 
distros whith mingetty running.

Thanks

Scott Mackenzie.


  By Date           By Thread  

Current thread:
[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]