Re: tcsh buffer overflow

From: Christos Zoulas (christosat_private)
Date: Tue Sep 15 1998 - 10:23:32 PDT

Next message: Casper Dik: "Re: Dump a mode --x--x--x binary on Linux 2.0.x"

Previous message: David LeBlanc: "Re: ColdFusion File Upload Exploit (fwd)"
Maybe in reply to: Wichert Akkerman: "tcsh buffer overflow"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

On Sep 15,  3:02am, wichertat_private (Wichert Akkerman) wrote:
-- Subject: tcsh buffer overflow

| --yrj/dFKFPuw6o+aM
| Content-Type: text/plain; charset=us-ascii
| Content-Transfer-Encoding: quoted-printable
|
|
| After the whole mess with bash recently I decided to take a short look
| at tcsh and found it has the same problems. Although tcsh-scripts
| are very uncommon, it's still exploitable. Below is a patch which
| should fix the problems.
|

But not all systems have getcwd()... This will have to be fixed in the
next version.

christos

Next message: Casper Dik: "Re: Dump a mode --x--x--x binary on Linux 2.0.x"
Previous message: David LeBlanc: "Re: ColdFusion File Upload Exploit (fwd)"
Maybe in reply to: Wichert Akkerman: "tcsh buffer overflow"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

This archive was generated by hypermail 2b30 : Fri Apr 13 2001 - 14:16:22 PDT