Bugtraq mailing list archives

Re: Buffer overflows in Solaris 2.6 ufsdump and ufsrestore

From: jonz () NETRAIL NET (Jonathan A. Zdziarski)
Date: Thu, 23 Apr 1998 16:31:23 -0400


The i386 Version of Solaris 2.6 appears to be safe (at least with the
latest patches from sun)...

jonz (15) % id
uid=100(jonz) gid=0(root)
jonz (16) % ./test
Offset: 0x8047a4c

  DUMP: Cannot open dump device
`AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAUP3;3@^3^F~^3FF PP
      P        jbin/shLL': File name too long
$ id
uid=100(jonz) gid=0(root)
$

Thank you,

Jonathan A. Zdziarski
Systems Administrator
Netrail Incorporated
jonz () netrail net
(888) NET-RAIL

Current thread:

Buffer overflows in Solaris 2.6 ufsdump and ufsrestore Seth McGann (Apr 23)
- Re: Buffer overflows in Solaris 2.6 ufsdump and ufsrestore Jonathan A. Zdziarski (Apr 23)
- <Possible follow-ups>
- Re: Buffer overflows in Solaris 2.6 ufsdump and ufsrestore Eugene Bradley (Apr 23)