[prev in list] [next in list] [prev in thread] [next in thread] 

List:       vuln-dev
Subject:    potential chage ovf
From:       m4rcyS <marcys () FREE ! COM ! PL>
Date:       1999-11-17 14:01:24
[Download RAW message or body]

I've found that chage (+s, rh 6.1) strcpy()'s lines from /etc/passwd.
I've no sources by my hand but I think there's possibility to overflow
chage with the GECOS field ...

greetz,
____________________________________________________________
                              m4rcyS

                   email: marcys@free.com.pl, m@sh.pl

"I think there is a world market for maybe five computers."
                     - Thomas Watson, chairman of IBM, 1943
------------------------------------------------------------

[prev in list] [next in list] [prev in thread] [next in thread]