Re: TCSH problems?

From: Nasko Oskov (compnetsecurityat_private)
Date: Wed Jun 06 2001 - 08:34:14 PDT

Next message: Kevin J. Menard, Jr.: "Re: TCSH problems?"

Previous message: Blue Boar: "Re: proof of exploited code"
Maybe in reply to: Alex: "TCSH problems?"
Next in thread: Kevin J. Menard, Jr.: "Re: TCSH problems?"
Next in thread: Andrew R. Reiter: "Re: nonsuid overflows... still at risk?"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

>	After some ktracing, and code auditing by myself and a colleague,
>we believe the problem *may* infact be in libc's setenv() and getenv()
>functions.  We were able to duplicate the bug on various platforms, mostly
>causing signal 6s and dumping cores.  Feedback would be appreciated
>
>
> > > setenv HOME `perl -e 'print "/" x 10000'`
>
>					^ Length varies from 1024-10000
>for effectiveness on diffrent OSes.

nasko@digital:~$ tcsh
>setenv HOME `perl -e 'print "/" x 10000'`
Aborted
nasko@digital:~$ uname -a
Linux digital 2.2.19 #2 SMP Sat Jun 2 12:23:40 AKDT 2001 i686 unknown
nasko@digital:~$

Platform: Slack current

Nasko
_________________________________________________________________________
Get Your Private, Free E-mail from MSN Hotmail at http://www.hotmail.com.

Next message: Kevin J. Menard, Jr.: "Re: TCSH problems?"
Previous message: Blue Boar: "Re: proof of exploited code"
Maybe in reply to: Alex: "TCSH problems?"
Next in thread: Kevin J. Menard, Jr.: "Re: TCSH problems?"
Next in thread: Andrew R. Reiter: "Re: nonsuid overflows... still at risk?"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

This archive was generated by hypermail 2b30 : Wed Jun 06 2001 - 10:33:36 PDT