The thing is this is the least of their worries... and as you said the author IS working dilligently to fix the issues at hand. As for the patch ... knock your self out heres the errant code. [root@ghetto ecartis-1.0.0]# grep -n pathname"\[" src/core.c 80:char pathname[BIG_BUF]; [root@ghetto ecartis-1.0.0]# grep -n "sprintf(pathname" src/core.c 891: sprintf(pathname, "%s", argv[0]); -KF John Madden wrote: >On Wednesday 24 April 2002 08:56 pm, KF wrote: > >>Heres some code for this post a while back ... >>http://online.securityfocus.com/archive/82/258763 >>This is NOT the same issue in the my_strings.c there are MULTIPLE issues >>in ecartis still and the same goes for listar... >>This issue is a strcpy from argv to a fixed buffer .... nothing special. >> > >Please see Ecartis' mailing list archives regarding these issues. They're >aware of the problems and are working to resolve them. > >How about, instead of just telling us about there being multiple issues >and posting an exploit, you post a patch to help fix the issues? > >Thanks, > John > > > > > > > >
This archive was generated by hypermail 2b30 : Fri Apr 26 2002 - 13:42:46 PDT