From owner-freebsd-audit Fri Dec 3 19:26:57 1999 Delivered-To: freebsd-audit@freebsd.org Received: by hub.freebsd.org (Postfix, from userid 758) id DD66014CB9; Fri, 3 Dec 1999 19:26:55 -0800 (PST) Received: from localhost (localhost [127.0.0.1]) by hub.freebsd.org (Postfix) with ESMTP id D00511CD7CD; Fri, 3 Dec 1999 19:26:55 -0800 (PST) (envelope-from kris@hub.freebsd.org) Date: Fri, 3 Dec 1999 19:26:55 -0800 (PST) From: Kris Kennaway To: tstromberg@rtci.com Cc: freebsd-audit@freebsd.org Subject: Re: More binaries with overflows. (7) In-Reply-To: <84724545.944257545945.JavaMail.chenresig@karma> Message-ID: MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII Sender: owner-freebsd-audit@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.ORG On Fri, 3 Dec 1999 tstromberg@rtci.com wrote: > /usr/bin/fsplit arg overflow in -e, ex: fsplit -e [A*16384] This one is just gross. It needs to be rewritten. > /usr/bin/patch arg overflow, ex: patch -r [A*16384] OpenBSD have a bunch of tempfile fixes as well as the buffer overflow fixes which should be merged. > /usr/bin/pr arg overflow, ex: pr -s [A*16384] This one was just a simple bug :) > /usr/bin/ypcat arg overflow in -d, ex: ypcat -d [A*16384] blah This one was a buffer overflow in libc which I'm testing a patch for now. I haven't checked the others yet Kris To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-audit" in the body of the message