【警告】Buffer Overflow in Sendmail (網管必讀-可取得root)

TAIWAN

Buffer Overflow in Sendmail (網管必讀-可取得root)
Sendmail 緩衝區溢出漏洞

http://www.cert.org/advisories/CA-2003-25.html

http://www.sendmail.org

Local exploitation on little endian Linux is confirmed to be trivial
via recipient.c and sendtolist(), with a pointer overwrite leading to a
neat case of free() on user-supplied data, i.e.:

eip = 0x40178ae2
edx = 0x41414141
esi = 0x61616161

SEGV in chunk_free (ar_ptr=0x4022a160, p=0x81337e0) at malloc.c:3242

0x40178ae2 <chunk_free+486>: mov %esi,0xc(%edx)
0x40178ae5 <chunk_free+489>: mov %edx,0x8(%esi)

Remote attack is believed to be possible.

類似的主題
主題	主題作者	討論版	回覆	最後發表
請問Stack overflow at line:0是什麼意思	aayboy	-- HELP ME 電腦軟硬體急救版	4	2011-01-27 09:21 AM
【問題】登入PCZONE論壇出現 stack overflow at line:0	a007	-- 網路軟體討論一版 (Browser,Email	0	2008-01-06 10:07 AM
出現stack overflow at line:0	hoboya	-- Windows 討論版	3	2006-11-14 10:51 AM
【警告】Buffer Overflow in Sendmail (網管必讀-可取得root)	TAIWAN	-- FreeBSD & Linux 討論版	2	2003-09-22 10:54 PM
[新聞]Buffer Overflow In IIS Indexing Service DLL	winson	-- 防駭 / 防毒版	0	2001-07-07 05:25 AM