Vulnerability Development: Re: minor (?) mc bug

From: Narr0w <narr0w_at_LAM3R.COM>
Date: Sat, 13 Nov 1999 22:39:02 +0200

MC 4.5.36 is too vulnerabel! (RH 6.0 hedwig, kernel 2.2.5-15)
Here are the bad lines:

FILE: src/treestore.c
LINE: 254,32
----------------------------------------------------------
tree_store_add_entry (name);
strcpy (oldname, name);
----------------------------------------------------------

FILE: src/treestore.c
LINE: 266,56
----------------------------------------------------------
if (different){
strcpy (oldname + common, different);
----------------------------------------------------------

FILE: src/treestore.c
LINE: 278,40
----------------------------------------------------------
}
strcpy (oldname, name);
----------------------------------------------------------

FILE: src/treestore.c
LINE: 340,8
----------------------------------------------------------

fprintf (file, "%s\n", TREE_SIGNATURE);
----------------------------------------------------------

--
Narrow - (Legion2000) Russian Security Team

Received on Nov 13 1999