Re: Solaris ipcs vulnerability

From: Sven C. Koehler (schweenat_private)
Date: Tue Apr 17 2001 - 04:58:17 PDT

Next message: neme-dhcat_private: "Advisory for SimpleServer:WWW (analogX)"

Previous message: neme-dhcat_private: "Advisory for Lotus Domino webserver"
In reply to: Robert Sink: "Re: Solaris ipcs vulnerability"
Next in thread: Robert G. Ferrell: "Re: Solaris ipcs vulnerability"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

On Mon, Apr 16, 2001 at 04:48:06PM -0400, Robert Sink wrote:
> I've tried:
>
> TZ=`/usr/local/bin/perl -e 'print "A"x1107'`
>
> ...on... both 64 bit Solaris 8 and Solaris 7 (we have no 32 bit
> machines here) and cannot get the programs to crash.  They just
> happily display the A's, plus the other information and exit normally.
>
> Solaris 7: SunOS xxx 5.7 Generic_106541-12 sun4u sparc
> Solaris 8: SunOS xxx 5.8 Generic_108528-05 sun4u sparc
>

It worked on my 32 bit Solaris 7 only when I made the TZ variable larger.

$ TZ=`perl -e 'print "A" x 10000'`
$ ipcs
Segmentation Fault

SunOS blue 5.7 Generic_106541-11 sun4u sparc SUNW,UltraSPARC-IIi-Engine

Next message: neme-dhcat_private: "Advisory for SimpleServer:WWW (analogX)"
Previous message: neme-dhcat_private: "Advisory for Lotus Domino webserver"
In reply to: Robert Sink: "Re: Solaris ipcs vulnerability"
Next in thread: Robert G. Ferrell: "Re: Solaris ipcs vulnerability"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

This archive was generated by hypermail 2b30 : Tue Apr 17 2001 - 12:22:42 PDT