🚀 go-pugleaf

Zbigniew Zych <zych@bit.onet.pl> wrote in article <5jbcc2$em4$1@bit.onet.pl>...
> Przyszło dziś emailem:
[wyciete...]
A cos takiego pojawilo sie na liscie Bugtraq:
----------
> To: BUGTRAQ@NETSPACE.ORG
> Subject: Buffer overflow in sperl5.003
> Date: 17 kwietnia 1997 23:11
> 
> 
>  Its came to my attention that there is a buffer overflow bug in
> sperl5.003 that will allow local users gain root access, if SUID root.
>  The exploit and bug was made and brought to my attention by Willy Tarreau.
>  Attached is the source for the exploit. Since it requires some work to
>  be done to the compiled exploit (Stripping of 5 byte at the begining and
>  end of the binary), the precompiled Linux x86 exploit can be found at
----------
[adres z wiadomych wzgledow wyciety]
I ciag dalszy z innego listu:
----------
>Note that the exploit tries offsets of 1170 to 1240.  Debian Linux with
>sperl5.00307 requires a value of 1169 (and is vulnerable).
>David.
---------

Kris
-- 
Krzysztof G. Baranowski - Prezes Klubu Nieszkodliwych Manjakow
"Invent something idiot-proof, and they will invent a better idiot"
http://www.rubikon.net.pl/~celestyn/maniak/