full-disclosure - Indigostar

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <20030622211147.GA20409@SDF.LONESTAR.ORG>
From: petard at sdf.lonestar.org (petard)
Subject: Indigostar - Perledit

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On Sun, Jun 22, 2003 at 03:12:31AM -0700, morning_wood wrote:
> Vunerability:
> -------------
> Remote Overflow

What evidence did you see that this is an overflow? While I wouldn't discount
the possibility of an overflow being present somewhere here, the crash alone
doesn't necessarily imply an overflow. In fact, I'd say that this most likely
isn't unless there is some specific evidence to the contrary.

At any rate, this does certainly open the possibility of an irritating denial
of service attack against perledit users. It should almost certainly only 
listen on 127.0.0.0.1:1956 instead of 0.0.0.0:1956. Does anyone know why this
editor accepts remote connections in the first place?

Regards,
petard

- -- 
"There are 10 kinds of people in this world: those who understand binary,
and those who don't." --unknown
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.1 (NetBSD)

iD8DBQE+9htjgkiZ59A0kiQRAu+XAJ908VfLIqeRYFRwKh9H0+APQJcD/QCbBnD7
hg2vhT8CQ/wLpC8kntV1WKI=
=FUYA
-----END PGP SIGNATURE-----