[9932] in bugtraq
/usr/bin/doscmd on BSDI
daemon@ATHENA.MIT.EDU (kasper)
Tue Mar 16 16:17:51 1999
Date: Sun, 14 Mar 1999 00:25:44 -0500
Reply-To: kasper <jay@DS9.AXSNY.NET>
From: kasper <jay@DS9.AXSNY.NET>
To: BUGTRAQ@NETSPACE.ORG
hi,
I found (I use the term loosely) a buffer overflow
in /usr/bin/doscmd distributed with BSDI 3.1..
for example :
finally:~ $ /usr/bin/doscmd `perl -e 'print "A" x 1015'`
Segmentation fault
doscmd is setuid executable as well.
I have not "tested" this out on anything other than 2 BSDI 3.1 (x86)
machines. Insight from other types is greatly appreciated.
bye
-jay
