[7800] in bugtraq
Re: Buffer overflows in Minicom 1.80.1
daemon@ATHENA.MIT.EDU (Alan Brown)
Sun Aug 30 02:48:54 1998
Date: Sun, 30 Aug 1998 13:57:10 +1200
Reply-To: Alan Brown <alan@MANAWATU.GEN.NZ>
From: Alan Brown <alan@MANAWATU.GEN.NZ>
X-To: Eduardo Navarro <edunavarro@USA.NET>
To: BUGTRAQ@NETSPACE.ORG
In-Reply-To: <35E805E4.EDA3D41@usa.net>
On Sat, 29 Aug 1998, Eduardo Navarro wrote:
> I have found some buffer overflows in Minicom 1.80.1 which comes setuid
> root with Slackware 3.5. I known that were discussed some overflows in
> other versions of minicom ( no setuid root) but i think it's "new" and
> more dangerous.
Another workaround not mentioned is to create a minicom group and
only allow trusted users to use the program.
You _do_ trust people with minicom access not to run up a huge
international phone bill, right?
AB
