Nmap Security Scanner
*Intro
*Ref Guide
*Install Guide
*Download
*Changelog
*Book
*Docs
Security Lists
*Nmap Hackers
*Nmap Dev
*Bugtraq
*Full Disclosure
*Pen Test
*Basics
*More
Security Tools
*Pass crackers
*Sniffers
*Vuln Scanners
*Web scanners
*Wireless
*Exploitation
*Packet crafters
*More
Site News
Site Search:
Exploit World
Advertising
About/Contact
Credits
Sponsors:
edgeos



Vulnerability Development: Can anyone verify a core dump on /sbin/mingetty

Can anyone verify a core dump on /sbin/mingetty

From: smackenz <smackenz_at_brad.ac.uk>
Date: Mon, 3 Dec 2001 14:46:31 +0000

*nix Issue - Anyone with 'mingetty':

After all the vi overflows, and wu-ftpd etc recently I thought I would have a
sniff around a default redhat 7.1 box too see what I could find. Anyway I
managed to dump core on /sbin/mingetty and thought it would be worth
reporting:

See below for the shell out:

[m0le_at_mainframe m0le]$ /sbin/mingetty `perl -e 'print "A"x9000'`
Segmentation fault (core dumped)
[m0le_at_mainframe m0le]$ id
uid=500(m0le) gid=500(m0le) groups=500(m0le)

(standard user account)

This only works by doing this:

/sbin/mingetty `perl -e 'print "A"x9000'`

when I did the following:

[m0le_at_mainframe m0le]$ cd /sbin
[m0le_at_mainframe /sbin]$ ./mingetty `perl -e 'print "A"x9000'`
Segmentation fault
[m0le_at_mainframe /sbin]$

No core dump.... It doesn't seem to dump in the sbin directory, however I've
successfully dumped from several other dir's.

I am running a RedHat7.1. I would appreciate some feedback from other
distros whith mingetty running.

Thanks

Scott Mackenzie.
Received on Dec 03 2001

[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]
edgeos