Bugtraq mailing list archives
How to exploit mudge by AlephOne by JP AntiOnline
From: mudge () L0PHT COM (Dr. Mudge)
Date: Fri, 24 Apr 1998 12:55:37 -0500
Uhm - Aleph had a early copy of my "notes" / paper before he wrote his (much improved) version that he published in Phrack. Certain parts were uncannilyly similar (http://www.l0pht.com/advisories/bufero.html) [original from 10/20/95]. I did get an e-mail from Aleph saying thanks and appologizing for not putting a thanks / credit in the phrack article. In this case that was perfectly fine with me. Maybe Aleph got a similar letter from JP... but, when it all boils down to it... it's not really new stuff, and neither Aleph, myself, etc... can really take credit for the existence of buffer overflows being used in malicious fashions. To wit: check out Robert Morris Jr's gets() sploit in the 'morris worm' on Vax architecture [note, the Motorolla part for the old sun's does not work in the worm] - sheesh, that was back when?????? cheers, .mudge
Current thread:
- More Microsoft debri Lloyd Vancil (Apr 23)
- <Possible follow-ups>
- Re: More Microsoft debri Michael Howard (Apr 23)
- Re: More Microsoft debri pedward () WEBCOM COM (Apr 23)
- Re: More Microsoft debri James E. Robinson, III (Apr 23)
- Another Frontpage Bug, with promiscuous ScriptAliases pedward () WEBCOM COM (Apr 23)
- Flaw in HTTP-Authentication in O'Reilly Website Pro BarKode (Apr 23)
- Re: Another Frontpage Bug, with promiscuous ScriptAliases Marc Slemko (Apr 23)
- How to exploit AlephOne by JP of AntiOnline F0RMiCA (Apr 24)
- Security Hole in Netscape Enterprise Server 3.0 Daragh Malone (Apr 24)
- Re: Security Hole in Netscape Enterprise Server 3.0 Matthew Frederick (Apr 24)
- How to exploit mudge by AlephOne by JP AntiOnline Dr. Mudge (Apr 24)
- Re: How to exploit mudge by AlephOne by JP AntiOnline Aleph One (Apr 24)
- Re: More Microsoft debri pedward () WEBCOM COM (Apr 23)