Re: Zlib double free "hole"

From: Ian Stirling (root@mauve.demon.co.uk)
Date: 03/18/02 

From: Ian Stirling <root@mauve.demon.co.uk>
Date: Mon, 18 Mar 2002 20:56:16 GMT

shadows <shadows@whitefang.com> wrote:
>
> With the recent advisorises that have been flying around thanks to
> the bug in zlib I'm curious as to know if anyone has exploited the
> zlib hole?
>
> Please know I'm not looking for an actual exploit, but rather a
> discussion on how a double free() could cause more than just
> segmentation fault.

Is it a "chosen plaintext" or "chosen ciphertext" attack?
IOW, if the attacker has not got access to your ISPs ppp routers, is
there anything that can be done? 

-- 
http://inquisitor.i.am/    |  mailto:inquisitor@i.am |             Ian Stirling.
---------------------------+-------------------------+--------------------------
Q: What do you call a train that doesn't stop at stations?
A: Thomas the ***.                                                -- Ben