• info
• discussion
• exploit
• solution
• references

Multiple Vendor dip Buffer Overflow Vulnerability

Solution:
Apply this patch:

--- main.c Tue Feb 13 03:03:35 1996
+++ main.c Mon May 4 23:36:49 1998
@@ -189,7 +189,7 @@
return;
}

- sprintf(buf, "%s/LCK..%s", _PATH_LOCKD, nam);
+ snprintf(buf, sizeof(buf), "%s/LCK..%s", _PATH_LOCKD, nam);

fp = fopen(buf, "r");
if (fp == (FILE *)0) {

Or chmod -s dip.