Vulnerability Development mailing list archives
restoretextmode problems
From: kotz () FLASH NET (robert)
Date: Mon, 11 Oct 1999 23:01:15 -0500
Well, I personally did not find this bug, but I helped "diagnose" it if you will. Basically, restoretextmode doesn't check to see that the data it reads from a file is CORRECT data (with restoretextmode -r that is, so if you feed it enough crap from a file (for example, in older versions, /etc/passwd is big enough) you can turn the monitor off. In newer versions, it has to be a larger number, please forgive the fact that I deleted the code a while back and don't remember that number exactly, but 3000 does it I'm pretty sure. Anyway, the monitor turns off, and you can't turn it back on without a reboot, found that out the hard way. The one thing about this, is, when tried remotely, you get the error that you aren't the current owner of the console. Now, I seem to remember a previous exploit that came across the same error and there was a way around it, but I don't remember exactly how it was, anyone know?
Current thread:
- Re: Guestbook perl script (error fix) Blue Boar (Oct 04)
- Re: Guestbook perl script (error fix) Matt Carothers (Oct 08)
- Newbie in Jeopardy Me Uh, K. (Oct 06)
- Re: Newbie in Jeopardy Nimrod Vered (Oct 09)
- Re: Guestbook perl script (error fix) Erik Parker (Oct 08)
- SSH and X11 forwarding Rob Quinn (Oct 08)
- fbsd 3.3 ospf_monitor research Brock Tellier (Oct 08)
- Re: fbsd 3.3 ospf_monitor research Jeff Bachtel (Oct 10)
- Re: fbsd 3.3 ospf_monitor research Andrew Reiter (Oct 11)
- restoretextmode problems robert (Oct 11)
- Newbie in Jeopardy Me Uh, K. (Oct 06)
- NT SysKey should be breakable Mikael Olsson (Oct 08)
- Re: NT SysKey should be breakable Mikael Olsson (Oct 09)
- 2 dodgy network programs Antonomasia (Oct 09)
- Re: 2 dodgy network programs Nick 'Zaf' Clifford (Oct 09)
- Re: 2 dodgy network programs David R. Conrad (Oct 13)
- Classes? Devin Walters (Oct 16)
- Re: Classes? Blue Boar (Oct 16)
- Re: Classes? Dragos Ruiu (Oct 16)
- Re: Classes? Bacano (Oct 17)
- Re: Classes? Max Vision (Oct 18)
- Re: Guestbook perl script (error fix) Matt Carothers (Oct 08)