Re: /usr/bin/ddate buffer overflow

["enthh () FLASH NET" <enthh () FLASH NET>]

no, although out of boredom, heres an exploit

----- Original Message -----
From: "Blue Boar" <BlueBoar () THIEVCO COM>
To: <VULN-DEV () SECURITYFOCUS COM>
Sent: 10 February, 2001 3:17 PM
Subject: Re: /usr/bin/ddate buffer overflow


> Are any of these setuid?
>
> BB
>
> SosPiro wrote:
> > I found a buffer overflow in /usr/bin/ddate (version unknown) "converts
> > Gregorian dates to Discordian dates.."
> > I tested it on my Linux Box (RedHat 6.2)
> > Look at this:
> >
> > #ddate +AAAA...x 408
> > Segmentation Fault (core dumped)
> >
> > sospiro

Attachment: ddate.c
Description: