SecurityFocus

OpenVMS fingerd remote stack overflow Aug 06 2008 11:08PM
Shaun Colley (scolleyuk hotmail co uk) (3 replies)

Re: OpenVMS fingerd remote stack overflow Aug 07 2008 08:51PM
mlbugtraq noci xs4all nl

Re: OpenVMS fingerd remote stack overflow Aug 07 2008 05:54PM
Kevin Finisterre (lists) (kf_lists digitalmunition com)

Re: OpenVMS fingerd remote stack overflow Aug 07 2008 05:40PM
Alexander Sotirov (alex sotirov net) (1 replies)

On Thu, Aug 07, 2008 at 12:08:53AM +0100, Shaun Colley wrote:
> The MultiNet finger service runs on port 79 by default (like other finger
> servers) and takes a username to query. A long string (~250+ or so bytes)
> will cause a stack overflow, giving control of a saved return address and
> hence the program counter (PC).

Hahahaha, welcome to 1988!

Alex

[ reply ]

Re: OpenVMS fingerd remote stack overflow Aug 08 2008 06:24PM
Tim Newsham (newsham lava net)