Pantek Library
Hosting Provided By
CybrHost
High Speed Hosting

slocate vulnerability

From: <xbuggyx(at)libero.it>
Date: Thu Jan 30 2003 - 10:02:03 EST


The exploitation is trivial ,but with libsafe this buffer overflow doesn't work:

(gdb) bt
#0 0x0018fb88 in _IO_vfprintf (s=0xbffff6ec,

    format=0x804c215 "%s: decode_db(): %s: %s\n", ap=0xbffff854)     at ../sysdeps/i386/i486/bits/string.h:530
#1 0x0012b47c in _IO_vfprintf () from /lib/libsafe.so.2
#2 0x001b1304 in _IO_vsnprintf (string=0x8056d28 "slocate: decode_db():
", maxlen=4096, format=0x804c215 "%s: decode_db(): %s: %s\n", args=0xbffff84c) at vsnprintf.c:130
#3 0x0012b715 in vsnprintf () from /lib/libsafe.so.2
#4 0x0804be26 in strcpy ()
#5 0x0804ab5e in strcpy ()
#6 0x0804b8e0 in strcpy ()
#7 0x00154657 in __libc_start_main (main=0x804b340 <strcpy+9116>, argc=5,

    ubp_av=0xbffffad4, init=0x8048c1c <last_use+131884472>,     fini=0x804bf50 <strcpy+12204>, rtld_fini=0x11dcd4 <_dl_fini>,     stack_end=0xbffffacc) at ../sysdeps/generic/libc-start.c:129 (gdb)

Best Regards

---
[Quipo ISP - Questa E-mail e' stata controllata dal programma Declude Virus]
[Quipo ISP - This E-mail was scanned for viruses by Declude Virus]
Received on Thu Jan 30 11:43:48 2003

This archive was generated by hypermail 2.1.8 : Wed Aug 23 2006 - 14:07:37 EDT


Contact Us  Legal Notices  Order Services Online 
Pantek Home  Privacy Policy  IT news  Site Map  Pantek Library