[15987] in bugtraq
[ Hackerslab bug_paper ] HP-UX bdf -t option buffer overflow vul.
daemon@ATHENA.MIT.EDU (Kyong-won Cho)
Thu Jul 27 16:32:05 2000
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="----=_NextPart_000_002E_01BFF81C.4CA1AD20"
Message-ID: <003101bff7d0$dcf58780$071bebcb@hackerslab.org>
Date: Thu, 27 Jul 2000 22:45:01 +0900
Reply-To: Kyong-won Cho <dubhe@HACKERSLAB.COM>
From: Kyong-won Cho <dubhe@HACKERSLAB.COM>
To: BUGTRAQ@SECURITYFOCUS.COM
This is a multi-part message in MIME format.
------=_NextPart_000_002E_01BFF81C.4CA1AD20
Content-Type: text/plain;
charset="ks_c_5601-1987"
Content-Transfer-Encoding: base64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------=_NextPart_000_002E_01BFF81C.4CA1AD20
Content-Type: text/html;
charset="ks_c_5601-1987"
Content-Transfer-Encoding: base64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------=_NextPart_000_002E_01BFF81C.4CA1AD20--
