|
|
BugTraq
Buffer Overflow in ActivePerl ? May 17 2004 08:23PM Oliver@greyhat.de (Oliver greyhat de) (3 replies) Re: Buffer Overflow in ActivePerl ? May 18 2004 12:58AM rich sf lclogic com (2 replies) RE: [Full-Disclosure] Re: Buffer Overflow in ActivePerl ? May 18 2004 11:22AM Bill Royds (full-disclosure royds net) |
|
Privacy Statement |
rich.sf (at) lclogic (dot) com [email concealed] wrote:
>Reproduced with 5.6.1/win95.
>
>On Mon, 17 May 2004, Oliver (at) greyhat (dot) de [email concealed] wrote:
>
>
>
>>Date: Mon, 17 May 2004 22:23:56 +0200
>>From: "Oliver (at) greyhat (dot) de [email concealed]" <Oliver (at) greyhat (dot) de [email concealed]>
>>To: full-disclosure (at) lists.netsys (dot) com [email concealed]
>>Cc: bugtraq (at) securityfocus (dot) com [email concealed]
>>Subject: Buffer Overflow in ActivePerl ?
>>
>>hi folks,
>>
>>i played around with ActiveState's ActivePerl for Win32, and crashed
>>Perl.exe with the following command:
>>
>>perl -e "$a="A" x 256; system($a)"
>>
>>I wonder if this bug isnt known?!? Because system() is a very common
>>command....
>>Can anybody reproduce this?
>>
>>I put together a little advisory on my website, including version
>>information and a debugger output (Drwatson):
>>
>> http://www.oliverkarow.de/research/ActivePerlSystemBOF.txt
>>
>>
>>PS: Due to travel activity, i will not be able to respond to mails
>>within the next 8 days!
>>
>>Regards,
>>
>>Oliver
>>
>>
>>
[ reply ]