bugtraq - Local stackbased overflow found for silly Poker v0.25.5 (advisory + poc exploit)

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [thread-next>] [day] [month] [year] [list]

Message-ID: <003b01c3879f$6018e560$0200a8c0@windows1>
Date: Wed, 1 Oct 2003 00:08:27 +0200
From: "demz" <demz@...ode.net>
To: <bugtraq@...urityfocus.com>
Subject: Local stackbased overflow found for silly Poker v0.25.5 (advisory + poc exploit)

Local stackbased overflow found in sill Poker v0.25.5
silly Poker contains an $HOME environment variable stack overflow,
this can be exploited very simple to execute arbitrary code with gid=games
privileges.

demz
demz@...ode.net

View attachment "c-code-adv002.txt" of type "text/plain" (1497 bytes)

Download attachment "c-sillyPoker.c" of type "application/octet-stream" (2318 bytes)