Gentoo Forums
Gentoo Forums
Gentoo Forums
Quick Search: in
Need Format String exploit on Gentoo for presentation
View unanswered posts
View posts from last 24 hours

 
Reply to topic    Gentoo Forums Forum Index Other Things Gentoo
View previous topic :: View next topic  
Author Message
Cypres
n00b
n00b


Joined: 15 Jun 2004
Posts: 6

PostPosted: Tue Jun 15, 2004 4:24 pm    Post subject: Need Format String exploit on Gentoo for presentation Reply with quote

Hi there,
At First: sorry for my bad english, i give my best :wink:

I am a student of computer science and i have to make a presentation of the Format String Bug with my own laptop (OS:Gentoo 2.4).
The Problem:
Is there any exploit to a programm (best case: remote) based on the Format String Bug which is tested under gentoo??

Thanks for all answers

Best greets
Cypres
Back to top
View user's profile Send private message
jkcunningham
l33t
l33t


Joined: 28 Apr 2003
Posts: 649
Location: 47.49N 121.79W

PostPosted: Tue Jun 15, 2004 5:49 pm    Post subject: Reply with quote

Interesting question. It poses a delemma: how do we know you aren't looking to actually exploit a remote computer?
Back to top
View user's profile Send private message
Cypres
n00b
n00b


Joined: 15 Jun 2004
Posts: 6

PostPosted: Tue Jun 15, 2004 6:08 pm    Post subject: Reply with quote

Well good question?
How can I explain you that i am a good boy?!
Not at all :evil:
But i insure all that i stand on the good side
you can set one remark:
My main search is a exploit which already exists for a program which is tested on gentoo!
By the way:
If a (format string) exploit works under Red Hat 8.0, works the same one on gentoo as well??

Thanks for answers

Cypres
Back to top
View user's profile Send private message
F.Ultra
Apprentice
Apprentice


Joined: 17 Mar 2004
Posts: 169
Location: Sweden

PostPosted: Tue Jun 15, 2004 6:34 pm    Post subject: Reply with quote

These kinds of exploits, generally, has to do with the application in quistion and not the system it is running on. If you find a version of an application voulnerable to this exploit under Red Hat, then the same application with the same version would be voulnerable under Gentoo unless someone on Gentoo has patched the ebuild. But if so then simply copy the application from the Red Hat installtion to the Gentoo one and you have what you are looking for.

Btw, if you do find such a voulnerable application, please let the developer/maintainer know so it can be patched.
Back to top
View user's profile Send private message
Display posts from previous:   
Reply to topic    Gentoo Forums Forum Index Other Things Gentoo All times are GMT
Page 1 of 1

 
Jump to:  
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum