Re: Buffer overflow in ftpd and locate bug

From: Andrew Pitman (ap1at_private)
Date: Thu May 06 1999 - 22:31:22 PDT

  • Next message: Russ Johnson: "Re: Outlook 98 allows spoofing internal users"

    Eugeny,
    
    Don't panic!!
    
    I'm CC'ing this to Bugtraq in case some aren't aware of this (very simple)
    solution:
    
    	use rm -d (as superuser) on the top-level directory.  Then run
    fsck to free the unreferenced inodes below it in the 'tree'.
    
    Andrew
    --
      "The wonderful thing about standards is that there are so
       many to choose from."
                                            (Andrew S. Tanenbaum)
    ------------------------------+----------------------------------
      Andrew Pitman               | Management Information Systems,
      Unix System Administrator/  | Technology Operations Support
                        Webmaster |             at Rowan University
    ------------------------------+----------------------------------
    
    On Tue, 4 May 1999, Eugeny Kuzakov wrote:
    
    > On Sun, 2 May 1999, Przemyslaw Frasunek wrote:
    >
    > >   Example:
    > >
    > >   I'm creating a directory structure with 300 subdirectories, each
    > > 255 chars length (source in attachment, also it's possible to do it
    > > via ftpd, because it calls mkdir() and chdir()).
    > I tryed it under 2.2-stable.
    > /usr/bin/find -- yes, core dumpes.
    > /bin/rm can not delete this tree...8-[  ]
    > I don't know how to remove it....
    >
    > --
    > 	Best wishes, Eugeny Kuzakov
    > 		Laboratory 321 ( Omsk, Russia )
    > 		kevat_private
    > 		ICQ#: 5885106
    >
    



    This archive was generated by hypermail 2b30 : Fri Apr 13 2001 - 14:45:14 PDT