bugtraq - Gnome nautilus bug

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [day] [month] [year] [list]

Message-ID: <20040412134907.7099.qmail@www.securityfocus.com>
Date: 12 Apr 2004 13:49:07 -0000
From: gsicht gsicht <nothing.king@...email.de>
To: bugtraq@...urityfocus.com
Subject: Gnome nautilus bug

Application:  Gnome nautilus
Versions:     2.2.1 and others
Bug:          Buffer Overflow
Exploitation: unknown
Date:         12.04.04
Author:       gsicht
              e-mail: nothing.king@...email.de

#####################
#  the bug:         #
#####################

i discovered a buffer overflow vulnerability in gnome nautilus.
i don't know many details about this overflow, but if someone is possible to create a directory with a name of 255 x A,
nautilus won't be able to handle with the directory. The creating of the directory could be possible through a ftp server.
example:
http://www.k-otik.com/exploits/08.11.0x82-wu262-advanced.c

if you delete your directory(not in a shell), you can find it in your trash. now clear it, and you'll get an error with a segmentation fault.
if you enter the directory in your trash with a double click and also do this with the next directory, you'll get a segmentation fault, too.