[4717] in bugtraq
shotgun-1.1b buffer overflow(s)
daemon@ATHENA.MIT.EDU (PLaGuEZ)
Tue Jun 17 01:46:26 1997
Date: Sat, 1 Jan 1994 13:52:01 +0100
Reply-To: PLaGuEZ <dube0866@EUROBRETAGNE.FR>
From: PLaGuEZ <dube0866@EUROBRETAGNE.FR>
To: BUGTRAQ@NETSPACE.ORG
hello,
for those who dont have time to read README files, here is a piece of
advise about a svgalib-based (=suid root) linux file manager called
shotgun (release 1.1b, found on sunsite; is there a newer one ?).
The author writes in this readme file that bound checks are to be
done... Actually, this code badly needs those bound checks ! There
are more than 10 buffer overflows in the code, all while root perms
haven't been dropped, as required by svgalib.
I dont include any exploit, but they're really trivial and are a good
start for those interested in buffer overflows.
laters,
plaguez
------------------------
plaguez / libpcap
dube0866@eurobretagne.fr
www.innu.org
------------------------
