[1453] in linux-security and linux-alert archive
[linux-security] Re: NLSPATH Stack Overwrite
daemon@ATHENA.MIT.EDU (Dan Stromberg)
Wed Feb 19 10:47:37 1997
Date: Wed, 19 Feb 1997 07:29:29 -0800
From: Dan Stromberg <strombrg@hydra.acs.uci.edu>
To: linux-security@redhat.com
Resent-From: linux-security@redhat.com
Reply-To: linux-security@redhat.com
I mentioned this on bugtraq, but why not repeat?
Debian 1.2.x is not vulnerable.
Debian 1.1.x is.
Dave G. wrote:
>
> Here are my preliminary tests:
>
> 5.2.18 is vulnerable (stock Redhat 3.0.3)
> 5.3.12 does not appear vulnerable (stock Redhat 4.0, I think)
>
> Dave G.
> <daveg@escape.com>
> http://www.escape.com/~daveg
