full-disclosure - Pine: .procmailrc rule against integer overflow

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [day] [month] [year] [list]

Message-ID: <Pine.LNX.4.44.0309111648080.29599-100000@localhost>
From: zen-parse at gmx.net (zen-parse)
Subject: Pine: .procmailrc rule against integer overflow

A procmail rule something like:

===CUT-BEGIN-RULE===
:0B:
* [a-zA-Z-]+\*[0-9]+\*=
$HOME/pine.int-overflow.attacks.do.not.open.with.pine.
====CUT-END-RULE====

should make exploitation of the integer overflow a little harder.

-- zen-parse

-- 
-------------------------------------------------------------------------
1) If this message was posted to a public forum by zen-parse@....net, it 
may be redistributed without modification. 
2) In any other case the contents of this message is confidential and not 
to be distributed in any form without express permission from the author.