Bugtraq mailing list archives
information on syslog bug wanted
From: antitrck () sbox tu-graz ac at (ALEXANDER SCHUETZ)
Date: Fri, 17 May 1996 11:40:51 +0200
Hi over there! I am the guy who reassembled the linux splitvt bug and posted the source of the ASM code here a while ago. I found out that the same ASM code and a single call to the SYSLOG kernel causes me a shell on my April/95 distribution of linux (I use the german s.u.s.e. cdrom distribution). Naturally, this alerted me and I guess I hafta update my linux version especially the librarys... anyway, what I could NOT get from the 8lgm advisory is a clue what is being send over a sendmail connection in the data of an email that is so errorneus that SYSLOG would report about the mail, happily swallowing my asm string. Any ideas what to send via email to make syslog report about that email? I am clueless. :) And yes, I am willing to post my asm code that causes a shell on an old linux that it shouldnt. Just ask.
Current thread:
- TCP SYN probe detection tool available Doug Hughes (May 14)
- Re: TCP SYN probe detection tool available Brian Mitchell (May 15)
- information on syslog bug wanted ALEXANDER SCHUETZ (May 17)
- BoS: SECURITY BUG in FreeBSD Krzysztof Labanowski (May 17)
- Re: BoS: SECURITY BUG in FreeBSD Dan Cross (May 17)
- Re: BoS: SECURITY BUG in FreeBSD Steve Reid (May 17)
- <Possible follow-ups>
- Re: TCP SYN probe detection tool available redeye () compulink gr (May 15)
- Re: TCP SYN probe detection tool available Casper Dik (May 16)
- SunOS 4.1.4 fingerd Andy Dills (May 16)
- Re: SunOS 4.1.4 fingerd Dave Dittrich (May 16)
- Re: fingerd problems Elliot Lee (May 16)
- Re: fingerd problems Jon Lewis (May 16)
- Re: fingerd problems Brian Mitchell (May 16)
- Re: TCP SYN probe detection tool available Casper Dik (May 16)
- Re: TCP SYN probe detection tool available Brian Mitchell (May 15)