Vulnerability Development mailing list archives
Re: TCSH problems?
From: KF <dotslash () snosoft com>
Date: Wed, 06 Jun 2001 07:33:16 -0400
Yeah see my post from a few hours before... titled "bash overflows" I have seen at least one post for linux bash overflows but not much follow up for other OS's. http://www.securityfocus.com/frames/?content=/templates/archive.pike%3Flist% 3D1%26tid%3D13697%26end%3D2001-06-09%26threads%3D0%26start%3D2001-06-03%26 This seems to affect bash and csh and tcsh on SCO and SunOS both. ... gdb dumps are provided with my mailing... -KF Alex wrote:
After some ktracing, and code auditing by myself and a colleague, we believe the problem *may* infact be in libc's setenv() and getenv() functions. We were able to duplicate the bug on various platforms, mostly causing signal 6s and dumping cores. Feedback would be appreciatedsetenv HOME `perl -e 'print "/" x 10000'`^ Length varies from 1024-10000 for effectiveness on diffrent OSes. -Alex
Current thread:
- nonsuid overflows... still at risk? KF (Jun 05)
- TCSH problems? Alex (Jun 06)
- Re: TCSH problems? Alex (Jun 06)
- Re: TCSH problems? Alex (Jun 06)
- Re: TCSH problems? Mike Duncan (Jun 06)
- Re: TCSH problems? Flux9 (Jun 06)
- Re: TCSH problems? KF (Jun 06)
- Re: TCSH problems? KF (Jun 06)
- Re: TCSH problems? Guezou Philippe (Jun 06)
- Re: TCSH problems? Alex (Jun 06)
- TCSH problems? Alex (Jun 06)
- Re: TCSH problems? Kevin J. Menard, Jr. (Jun 06)
- Re: TCSH problems? Flux9 (Jun 06)
- Re: TCSH problems? Sven van ´t Veer (Jun 06)
- Re: TCSH problems? Edsel Adap (Jun 06)
- Re: TCSH problems? Felix Kronlage (Jun 06)
- Re: TCSH problems? Andreas Forsgren (Jun 06)
- Re: TCSH problems? Branko Ivanovic (Jun 06)
- Re: TCSH problems? Lee Smith (Jun 06)
