bugtraq - mac osx- admin service buffer overflow

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [day] [month] [year] [list]

Message-ID: <20040318232447.29522.qmail@search.securityfocus.com>
Date: 18 Mar 2004 23:24:47 -0000
From: <programming_rocks1@...mail.com>
To: bugtraq@...urityfocus.com
Subject: mac osx- admin service buffer overflow

I discovered that by netcatting/telneting/otherwise sending 2057 A's to port 610 (admin service) of an osx server box that the serivce will crash and restart. I infered that the buffer must be set at 2056 charactors. I was only able to test this on one box, and I was not able to get on it and dump memory, etc as it was a friends. A was also unable to make a shellcode for this, but that's because of my not-quite-elite knowlage, not that it's impossible.

I notified Mac about 4 weeks ago, no response and no patch.

Thanks and sorry I can't give more info,

-Jack C ("crEp")
crep@...viasecurity.net
http://www.crepinc.com