full-disclosure - Re: Buffer Overflow in ActivePerl ?

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <BAY9-DAV288ARf3sllN0003460d@hotmail.com>
From: se_cur_ity at hotmail.com (morning_wood)
Subject: Re: Buffer Overflow in ActivePerl ?

>and we seem to get control of EIP.  Coincidence?  Try yet two more:
>C:\>perl -e "$a="A" x 261; system($a)"

C:\>perl -V

Characteristics of this binary (from libperl):
  Compile-time options: MULTIPLICITY USE_ITHREADS PERL_IMPLICIT_
LICIT_SYS
  Locally applied patches:
        ActivePerl Build 635
  Built under MSWin32
  Compiled at Feb  4 2003 15:34:21
  @INC:
    C:/Perl/lib
    C:/Perl/site/lib
    .
C:\>

C:\>perl -e "$a="A" x 261; system($a)"
The input line is too long.

[CRASHE HERE]

C:\>