SunOS 5.6 (X86) lpset vulnerability

From: kim yong-jun homepage=ce.hannam.ac.kr/~s96192 (bugscanat_private)
Date: Mon May 10 1999 - 19:43:46 PDT

  • Next message: Forrest J. Cavalier III: "INN 2.0 and higher. Root compromise potential" 

    This is my second post to ButTraq.
If  this is old, I'm sorry.


It's buffer overflow in "/usr/bin/lpset".

View this command :
[loveyou@/] % /usr/bin/lpset -a key=`perl  -e 'print "x" x 1006'` loveyou

[loveyou@/] % /usr/bin/lpset -a key=`perl  -e 'print "x" x 1007'` loveyou
Segmentation fault

:)

byebye..

>-------------------------------------------------------------<
  Loveyou's World
  Yong-Jun , Kim ( bugscanat_private )					
  Network Engineer
>-------------------------------------------------------------<

    This archive was generated by hypermail 2b30 : Fri Apr 13 2001 - 14:45:33 PDT