Re: *BSD banner INT overflow vulnerability

[<daylasoul () hush com>]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On Sun, 26 Nov 2006 01:21:50 -0600 "J.A. Terranson" <measl () mfn org>
wrote:
> On Wed, 22 Nov 2006, Sean Comeau wrote:
>
> > On Wed, Nov 22, 2006 at 12:25:46PM +0300, dead code crew wrote:
> > >  %uname -sir
> > >  FreeBSD 6.1-RELEASE GENERIC
> > >  %gdb banner
> > >  (gdb) r -w 17000000
> > >  Program received signal SIGSEGV, Segmentation fault.
> > >  0x01010101 in ?? ()
> >
> > This doesn't crash banner on OpenBSD,
>
> FreeBSD 4.10R doesn't give a shit either.
>
> > and even if it did who cares?  What would anyone accomplish by
> making
> > this setuid root?
>
>   -bash-2.05b$ ls -al /usr/bin/banner
>   -r-xr-xr-x  1 root  wheel  16136 May 25  2004 /usr/bin/banner
>
> Good question.
>
> --
> Yours,
>
> J.A. Terranson
> sysadmin () mfn org
> 0xBD4A95BF
>
> "Surely the larger lesson learned from that day is that other men,
> all
> over the world, took inspiration not from the heroism of the
> rescuers in
> New York or the passengers flying over Pennsylvania, but from the
> 19
> hijackers - the twisted brilliance of their scheme and their
> willingness
> to sacrifice their lives to make a political and, as they saw it,
> religious statement."
>
> Richard Corliss/Time Magazine
> 11 Aug 2006
>
> _______________________________________________
> Full-Disclosure - We believe in it.
> Charter: http://lists.grok.org.uk/full-disclosure-charter.html
> Hosted and sponsored by Secunia - http://secunia.com/
Please maintain a reasonable standard of netiquette when posting.
Thanks.
-----BEGIN PGP SIGNATURE-----
Note: This signature can be verified at https://www.hushtools.com/verify
Version: Hush 2.5

wpwEAQECAAYFAkVpd7YACgkQ3AEcWsxdEQ496QP/VshMF0rw60R4PnGpNosJN7A+boQn
TC1i7J+RaainFCV0vrqxWpRzrhol4raV14KWAxTvq/jwZAcMz18f4j2Y2LmOoFGCrRUR
+06y6YkIVGGyoYgu0zzmvyS9hkKXqRv675/fZg45FqW9gGWqJaxJ8vvKaYt87DrP0EJ+
1G51vxw=
=SqM0
-----END PGP SIGNATURE-----




Concerned about your privacy? Instantly send FREE secure email, no account required
http://www.hushmail.com/send?l=480

Get the best prices on SSL certificates from Hushmail
https://www.hushssl.com?l=485

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/