[32368] in bugtraq
buffer overflow in unace (linux extractor for .ace files)
daemon@ATHENA.MIT.EDU (Andreas Constantinides (MegaHz))
Mon Nov 10 18:18:30 2003
From: "Andreas Constantinides (MegaHz)" <megahz@megahz.org>
To: bugtraq@securityfocus.com
Content-Type: text/plain
Message-Id: <1068406242.17914.15.camel@megahz>
Mime-Version: 1.0
Date: 09 Nov 2003 21:30:42 +0200
Content-Transfer-Encoding: 7bit
Hello,
I have discover a realy simple buffer overflow in unace(www.winace.com)
command.
normally if you put a wrong filename:
[root@megahz root]# ./unace e aa.ace
UNACE v2.2 Copyright by ACE Compression Software May 9 2002
10:59:42
Error: No such archive found:
/root/aa.ace
[root@megahz root]#
====================================================================================
the buffer overflow
[root@megahz root]# ./unace e aaaaaa(a*600).ace
UNACE v2.2 Copyright by ACE Compression Software May 9 2002
10:59:42
Segmentation fault
[root@megahz root]#
====================================================================================
winace was contacted about this.
MegaHz
www.megahz.org
www.cyhackportal.com
