Vulnerability Development: Re: /usr/bin/Mail buffer 0verfl0w

["Nasko ." <compnetsecurity () HOTMAIL COM>]

[striker () ibm:~] mail
Mail version 8.1 6/6/93.  Type ? for help.
"/var/spool/mail/striker": 1 message 1 unread
> U  1 striker () ibm localnet  Fri Mar  2 19:35  14/382   "Test"
& t
00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000...
...
00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
0: Invalid message number
"Source" stack over-pop.
Segmentation fault
[striker () ibm:~]

total of 2300 zeros crashes slack

[striker () ibm:~] ls -l `whereis Mail`
lrwxrwxrwx   1 root     root           13 Nov 18 11:33 /bin/Mail ->
/usr/bin/Mail
-rwxr-xr-x   1 root     bin         75996 Jun  9  2000 /usr/bin/Mail
[striker () ibm:~] uname -a
Linux ibm 2.2.16 #4 Tue Feb 20 16:18:26 CST 2001 i586 unknown
[striker () ibm:~]

Nasko
_________________________________________________________________________
Get Your Private, Free E-mail from MSN Hotmail at http://www.hotmail.com.