FreeBSD-SA-14:25.setlogin

  • Thread starter FreeBSD Security
  • Start date
Status
Not open for further replies.
F

FreeBSD Security

Guest
bYZNIHb1vgA
When setlogin(2) is called while setting up a new login session, the login name is copied into an uninitialized stack buffer, which is then copied into a buffer of the same size in the session structure. The getlogin(2) system call returns the entire buffer rather than just the portion occupied by the login name associated with the session.

Continue reading...
 
Status
Not open for further replies.
Back
Top