RE: Digital Unix CDE dtaction vulnerability concept of proof code

From: Durell, Matthew (matthew.durellat_private)
Date: Thu Nov 15 2001 - 15:48:20 PST

Next message: Rich Teer: "Re: /usr/bin/write (solaris2.x) Segmentation Fault"

Previous message: Jim: "Re: NSFOCUS SA2001-07 : ActivePerl PerlIS.dll Remote Buffer Overflow Vulnerability"
Maybe in reply to: SeungHyun Seo: "Digital Unix CDE dtaction vulnerability concept of proof code"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

I suspect this is a closed issue.  I tested on 4.0f with BL15 and it is not
vulnerable.  This appears to be something Compaq fixed a while ago.

-----Original Message-----

DEC released a patch for dtaction a while back.

Is this exploiting the vulnerability the patch fixed, or a new
vulnerability?

On Fri, Nov 16, 2001 at 05:59:30AM +0900, SeungHyun Seo wrote:
> 
> 
> Digital Unix 4.0d CDE dtaction vulnerability exploitable.
> concept of proof code follows

Next message: Rich Teer: "Re: /usr/bin/write (solaris2.x) Segmentation Fault"
Previous message: Jim: "Re: NSFOCUS SA2001-07 : ActivePerl PerlIS.dll Remote Buffer Overflow Vulnerability"
Maybe in reply to: SeungHyun Seo: "Digital Unix CDE dtaction vulnerability concept of proof code"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

This archive was generated by hypermail 2b30 : Thu Nov 15 2001 - 20:03:50 PST