- cypherpunks-legacy - lists.cpunks.org

Re: Ray Cromwell: Another Netscape Bug (and possible security
by Neil Woods 28 Sep '95

28 Sep '95

> > > >On my BSDI2.0 machine running Netscape 1.1N, this causes a segmentation > > >fault and subsequent coredump. GDB reports nothing useable (stripped > > >executable) > > > > I cannot reproduce this bug on the following platforms: > > > > Solaris 2.5 beta/Netscape 1.1N > > I've reproduced it fine under sol2.4 1.1N. The page > I tested from is http://www.aloha.net/~newsham/test.html. > Simply click on the long test url and core dump. > (You can view source before clicking to see what you > are clicking on if you dont trust me :) > > > Howard Owen hbo(a)octel.com Octel Communications Corporation 1024/DC671C31 = > Ive tried this url, it does indeed core dump. Just had a quick look at the core. From first impressions, it's a global overwrite. Therefore we're not overwriting a flushed stack frame, so a syslog(3) style exploit is impossible. Global overwrites can be exploited, but due to the scenario we're looking at, I'd consider exploit chances to be very low indeed. Cheers, Neil -- Let the Mystery Be, So Watcha Want, Longing In Their Hearts, Hate My Way, M-Bike, Safari, Uncle June and Aunt Kiyoti, Daisy Dead Petals, Tuff Gnarl. ...like a badger with an afro throwing sparklers at the Pope... -- sameer Voice: 510-601-9777 Community ConneXion FAX: 510-601-9734 An Internet Privacy Provider Dialin: 510-658-6376 http://www.c2.org (or login as "guest") sameer(a)c2.org

1 0

Mathematics Library Plus -- Interactive Math Tutorial
by coe＠best.com 28 Sep '95

28 Sep '95

The Mathematics Library Plus Series include five (5) CD-ROM titles featuring Algebra, Calculus, Statistics, Geometry, and Trignometry Each CD-ROM title is a compendium of scientific and mathematical equations. Each listing explains the fundamental principle(s), corollaries of the equation and its sample usage. Each CD-ROM title is a step-by-step and easy-to-follow interactive tutorial software for students from high school to college levels. A comprehensive self study guide with online text references and a useful resources for pre-test practices. Hundreds of problems ranging from easy to difficult and come with interactive hints and solutions. For more info, please visit http://www.coe.com/ari/ To download a copy of the MLP sampler, use anonymous ftp to ftp.coe.com Under the directory, pub/outgoing/mlp Thank you. info(a)coe.com

1 0

Re: Defense against a class of programming bugs
by patrick＠verity.com 24 Sep '95

24 Sep '95

1 0

None
by None 05 Sep '95

05 Sep '95

1 0

None
by None 05 Sep '95

05 Sep '95

1 0

None
by None 05 Sep '95

05 Sep '95

1 0

None
by None 05 Sep '95

05 Sep '95

1 0

None
by None 05 Sep '95

05 Sep '95

1 0

None
by None 05 Sep '95

05 Sep '95

1 0

None
by None 05 Sep '95

05 Sep '95

1 0