| lists.openwall.net | lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC | |
|
Open Source and information security mailing list archives
| ||
|
Date: 3 Jul 2003 17:39:11 -0000 From: <ace@...tic-x.org> To: bugtraq@...urityfocus.com Subject: [STX] Multiple Security Vulnerabilities Multiple files vulnerable to a buffer overflow: - gnuchess is an updated version of the GNU chess playing program. It has a simple alpha-numeric board display, an IBM PC compatible interface, or it can be compiled for use with the chesstool program on a SUN workstation or with the xboard program under X-windows. - gnuan produces an analysis of a chess game. For each move it shows the move, the score and the principle variation selected by gnuchess. - isdnrep reads the isdnlog log files, generates reports, does statistics, and other things. It can also generate HTML output for use with a web server. ; By default the above are not suid. proof of concept code for the above can be found at: http://www.static-x.org/hax.php?pwned=code
Powered by blists - more mailing lists