[<prev] [next>] [<thread-prev] [day] [month] [year] [list]
Date: Fri, 8 Aug 2008 08:24:16 -1000 (HST)
From: Tim Newsham <newsham@...a.net>
To: Alexander Sotirov <alex@...irov.net>
Cc: bugtraq@...urityfocus.com
Subject: Re: OpenVMS fingerd remote stack overflow
> On Thu, Aug 07, 2008 at 12:08:53AM +0100, Shaun Colley wrote:
>> The MultiNet finger service runs on port 79 by default (like other finger
>> servers) and takes a username to query. A long string (~250+ or so bytes)
>> will cause a stack overflow, giving control of a saved return address and
>> hence the program counter (PC).
>
> Hahahaha, welcome to 1988!
Old software can be so much fun.
http://minnie.tuhs.org/pipermail/unix-jun72/2008-May/000126.html
http://minnie.tuhs.org/pipermail/unix-jun72/2008-May/000250.html
> Alex
Tim Newsham
http://www.thenewsh.com/~newsham/
Powered by blists - more mailing lists