Bugtraq mailing list archives

/usr/bin/doscmd on BSDI


From: jay () DS9 AXSNY NET (kasper)
Date: Sun, 14 Mar 1999 00:25:44 -0500


hi,
        I found (I use the term loosely) a buffer overflow
in /usr/bin/doscmd distributed with BSDI 3.1..

for example :

finally:~ $ /usr/bin/doscmd `perl -e 'print "A" x 1015'`
Segmentation fault

doscmd is setuid executable as well.

I have not "tested" this out on anything other than 2 BSDI 3.1 (x86)
machines. Insight from other types is greatly appreciated.

bye

-jay



Current thread: