Re: telnet overflow

["Replugge [Rod]" <replugge () alcoholico org>]

Thats a bug on the client provided by kerberos, not the server, by the
way you don't need 9000 A's,  with 478 is enough...


[replugge@localhost replugge]$ telnet localhost -l `perl -e "print 'X' x
478"`

Trying 127.0.0.1...
Connected to localhost.localdomain (127.0.0.1).
Escape character is '^]'.
Segmentation fault (core dumped)

[replugge@localhost replugge]$ telnet localhost
Trying 127.0.0.1...
Connected to localhost.localdomain (127.0.0.1).
Escape character is '^]'.

Red Hat Linux release 7.1 (Seawolf)
Kernel 2.4.9 on an i686
login: 


[replugge@localhost replugge]$ gdb telnet core 
GNU gdb Red Hat Linux (5.1-0.71)
Copyright 2001 Free Software Foundation, Inc.
GDB is free software, covered by the GNU General Public License, and you
are
welcome to change it and/or distribute copies of it under certain
conditions.
Type "show copying" to see the conditions.
There is absolutely no warranty for GDB.  Type "show warranty" for
details.
This GDB was configured as "i386-redhat-linux"...(no debugging symbols
found)...
Core was generated by `telnet localhost -l
XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX'.
Program terminated with signal 11, Segmentation fault.
Reading symbols from /usr/kerberos/lib/libkrb4.so.2...(no debugging
symbols found)...done.
Loaded symbols for /usr/kerberos/lib/libkrb4.so.2
Reading symbols from /usr/kerberos/lib/libkrb5.so.3...(no debugging
symbols found)...done.
Loaded symbols for /usr/kerberos/lib/libkrb5.so.3
Reading symbols from /usr/kerberos/lib/libdes425.so.3...(no debugging
symbols found)...done.
Loaded symbols for /usr/kerberos/lib/libdes425.so.3
Reading symbols from /usr/kerberos/lib/libk5crypto.so.3...(no debugging
symbols found)...done.
Loaded symbols for /usr/kerberos/lib/libk5crypto.so.3
Reading symbols from /usr/kerberos/lib/libcom_err.so.3...(no debugging
symbols found)...done.
Loaded symbols for /usr/kerberos/lib/libcom_err.so.3
Reading symbols from /lib/libresolv.so.2...done.
Loaded symbols for /lib/libresolv.so.2
Reading symbols from /lib/libtermcap.so.2...done.
Loaded symbols for /lib/libtermcap.so.2
Reading symbols from /lib/i686/libc.so.6...done.
Loaded symbols for /lib/i686/libc.so.6
Reading symbols from /lib/ld-linux.so.2...done.
Loaded symbols for /lib/ld-linux.so.2
Reading symbols from /lib/libnss_files.so.2...done.
Loaded symbols for /lib/libnss_files.so.2
#0  0x4014d090 in chunk_free (ar_ptr=0x40200b80, p=0x807a3e0) at
malloc.c:3231
3231    malloc.c: No such file or directory.
        in malloc.c




-- 
/* 
Rodrigo Gutierrez                   <rodrigo () trustix com>
Trustix AS                         http://www.trustix.com 
*/