Vulnerability Development: csh/tcsh vulnerability

["정 훈영" <dragory1 () hotmail com>]

OS : Solaris 8

[sf280r]#/home/dragory> bash
[dragory () sf280r dragory]$ export HOME=`perl -e 'print "x"x5000'`
[dragory () sf280r dragory]$ su
Password:(input correct password)
Segmentation Fault (core dumped)
[dragory () sf280r dragory]$ ls -l core
-rw-------   1 root       580464 Jun 27 12:29 core
[sf280r]#/home/dragory> gdb -q tcsh core
(no debugging symbols found)...Core was generated by `tcsh'.
Program terminated with signal 11, Segmentation Fault.
#0  0x29be4 in doglob ()

Is this vulnerable?



_________________________________________________________________
MSN Explorer가 있으면 Hotmail 사용이 훨씬 편리해 집니다. 지금 
http://explorer.msn.co.kr/ 에서 무료로 다운로드하세요.