Home page logo

bugtraq logo Bugtraq mailing list archives

Re: openMosix userspace library stack-based buffer overflow
From: nixpanic () users sourceforge net
Date: 10 Apr 2008 15:01:18 -0000

This vulnerability does not seem to be valid. The example given in the API can not be abused by any (correctly) working 
application using this libary. The 'const char *item' argument only has limited valid values. If an invalid value is 
used, the application won't be able to gather the requested information. None of the possible valid values can be used 
to create a buffer overflow.

As stated in the openMosix-API: 'item' can be e.g. load, speed, cpus, util, status, mem, rmem, tmem)
This refers to the files available in the /proc/hpc-directorystructure. None of these files have a filename longer than 
the allocated buffer.

  By Date           By Thread  

Current thread:
[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]