Re: trusting user-supplied data (was Re: FreeBSD Security AdvisoryFreeBSD-SA-02:23.stdio)

From: Paul Starzetz (Paul.Starzetzat_private)
Date: Sat May 04 2002 - 12:02:28 PDT

Next message: Jim Kovalchuk: "Re: Slackware 8.0 / ucd-snmpd 4.2.1 exploit works?"

Previous message: Syzop: "Re: trusting user-supplied data (was Re: FreeBSD Security AdvisoryFreeBSD-SA-02:23.stdio)"
In reply to: Syzop: "Re: trusting user-supplied data (was Re: FreeBSD Security AdvisoryFreeBSD-SA-02:23.stdio)"
Next in thread: John Thornton: "Finding and exploiting buffer overflows in Windows."
Reply: John Thornton: "Finding and exploiting buffer overflows in Windows."
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

Syzop wrote:

>searched for such a tool so there might be better ones)...
>But that one was slow when "resolving" fd#-> filename, you use
>a nice /proc trick while env_audit was searching the whole filesystem
>for a certain inode... I modified that part now and you can find it at
>  
>
It will probably only work on Linux :-> (maybe solaris?)

regards,

Paul

Next message: Jim Kovalchuk: "Re: Slackware 8.0 / ucd-snmpd 4.2.1 exploit works?"
Previous message: Syzop: "Re: trusting user-supplied data (was Re: FreeBSD Security AdvisoryFreeBSD-SA-02:23.stdio)"
In reply to: Syzop: "Re: trusting user-supplied data (was Re: FreeBSD Security AdvisoryFreeBSD-SA-02:23.stdio)"
Next in thread: John Thornton: "Finding and exploiting buffer overflows in Windows."
Reply: John Thornton: "Finding and exploiting buffer overflows in Windows."
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

This archive was generated by hypermail 2b30 : Sat May 04 2002 - 17:06:34 PDT