full-disclosure - [security] Re: FAKE: RedHat: Buffer Overflow in "ls" and "mkdir"

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [day] [month] [year] [list]

Message-ID: <20041025210727.GA3135@slo.homelinux.net>
From: brett at custom-tech.net (Brett Campbell)
Subject: [security] Re: FAKE: RedHat: Buffer Overflow in "ls" and "mkdir"

On Sun, Oct 24, 2004 at 06:18:41PM -0700, Andrew Farmer wrote:
<snip> 
> I did a quickie analysis of the program (which is basically just 
> distributed as source!).
<snip>

when did you get a hold of the tarball? they must've yanked the record
for www.fedora-redhat.com ... it can't be resolved in any way.

pretty interesting (and pathetic) anyways, nice detective work.

-- 
[ Brett R. Campbell ]
 -> Configuration Management / Systems Administration
 -> Collaborative Agent Design Research Center
 -> California Polytechnic State University, SLO, CA
 http://www.cadrc.calpoly.edu/frameset_content/content_about_us.html