[9846] in bugtraq
Solaris "/usr/bin/write" bug
daemon@ATHENA.MIT.EDU (bugscan@KOSNET.NET)
Tue Mar 9 12:09:10 1999
Date: Mon, 8 Mar 1999 15:30:36 +0900
Reply-To: bugscan@KOSNET.NET
From: bugscan@KOSNET.NET
To: BUGTRAQ@NETSPACE.ORG
This is my first post to BugTraq
If this is old, I'm sorry.
when playing around with "/usr/bin/write" on Solaris 2.6 x86 , I found something
interesting.
It's buffer overflow bug in "/usr/bin/write"
To ensure, view this command :
( Solaris 2.6 x86 )
[loveyou@/user/loveyou/buf]{30}% write loveyou `perl -e 'print "x" x 97'`
[loveyou@/user/loveyou/buf]write loveyou `perl -e 'print "x" x 97'`
xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
xxxxxxxxxxxxxxxxx permission denied
[loveyou@/user/loveyou/buf]write loveyou `perl -e 'print "x" x 98'`
Segmentation fault
( Solaris 2.5.1(2.5) sparc )
[love]/home/love> write loveyou `perl -e 'print "x" x 79'`
xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
permission denied
[love]/home/love> write loveyou `perl -e 'print "x" x 80'`
Segmentation Fault
( Solaris 2.6 and 2.7 maybe .. )
bye bye ~ :)
