Skip site navigation (1)Skip section navigation (2)
Date:      Fri, 3 Dec 1999 19:26:55 -0800 (PST)
From:      Kris Kennaway <kris@hub.freebsd.org>
To:        tstromberg@rtci.com
Cc:        freebsd-audit@freebsd.org
Subject:   Re: More binaries with overflows.  (7)
Message-ID:  <Pine.BSF.4.21.9912031922230.4215-100000@hub.freebsd.org>
In-Reply-To: <84724545.944257545945.JavaMail.chenresig@karma>

next in thread | previous in thread | raw e-mail | index | archive | help
On Fri, 3 Dec 1999 tstromberg@rtci.com wrote:

> /usr/bin/fsplit	arg overflow in -e, ex: fsplit -e [A*16384]

This one is just gross. It needs to be rewritten.

> /usr/bin/patch	arg overflow, ex: patch -r [A*16384]

OpenBSD have a bunch of tempfile fixes as well as the buffer overflow
fixes which should be merged.

> /usr/bin/pr	arg overflow, ex: pr -s [A*16384]

This one was just a simple bug :)

> /usr/bin/ypcat	arg overflow in -d, ex: ypcat -d [A*16384] blah

This one was a buffer overflow in libc which I'm testing a patch for now.

I haven't checked the others yet

Kris



To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-audit" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?Pine.BSF.4.21.9912031922230.4215-100000>