Re: Fwd: [cle-devel] Security Alert! (cce and jmce)

2000-06-21 Thread Anthony Fok
On Wed, Jun 21, 2000 at 07:48:21AM +, Chuan-kai Lin wrote:
 Anthony Fok [EMAIL PROTECTED] wrote:
  [EMAIL PROTECTED]@
 
  bugtraq  kon2  adversary 
  :(
 
 ... ... [EMAIL PROTECTED]
  strcpy   ConfigInputMethod 
 [EMAIL PROTECTED]|...

[EMAIL PROTECTED]@Debian JP  Fumitoshi UKAI  patch
 kon2  security patch  buffer overflow bugs
  ^_^

[EMAIL PROTECTED]@[EMAIL PROTECTED]|  ^_^



-- 
Anthony Fok Tung-LingCivil and Environmental Engineering
[EMAIL PROTECTED], [EMAIL PROTECTED]University of Alberta, Canada
Come visit Our Lady of Victory Camp -- http://www.olvc.ab.ca/




Re: Fwd: [cle-devel] Security Alert! (cce and jmce)

2000-06-20 Thread Anthony Fok
On Tue, Jun 20, 2000 at 12:35:12PM +, Chuan-kai Lin wrote:
 Anthony Fok [EMAIL PROTECTED] wrote:
   cce  0.11  Debian  cce  0.36 
   buffer overflow error.   buffer overflow
 
 [EMAIL PROTECTED] cce  buffer overflow 
  cce 

[EMAIL PROTECTED]@

   setuid-root 
  console [EMAIL PROTECTED] root 
 
  potatoe  cce 
  strcmp  strdup 
 [EMAIL PROTECTED]| buffer overflow  
 

[EMAIL PROTECTED]@ cce_exploit.c  cce 0.36 segmentation fault


[EMAIL PROTECTED]@ cce  [EMAIL PROTECTED]
[EMAIL PROTECTED] cce-0.11  cce-0.36  ^_^
 strcpy  strncpy 

  linuxfab  kid ... ^^

[EMAIL PROTECTED]@[EMAIL PROTECTED] CLE-0.9  cce  0.11 

Uh oh... wait, this scares me:  (both good and bad)

ver 0.33  Jul. 99
-
based on kon, hardware screen scrolling(fast) using splited screen tech.
no multiple-terminal, mouse support, pinyin input method added

[EMAIL PROTECTED]@[EMAIL PROTECTED] kon [EMAIL PROTECTED]
 Debian JP  [EMAIL PROTECTED] 
[EMAIL PROTECTED] security patch
buffer overflow problem

ver 2.x
-
test version

ver 0.11  May 98
-
based on yact, chdrv, bcs, software screen scrolling(slow)
multiple-terminal support, input method based on xcin

[EMAIL PROTECTED]@ Debian  chdrv chdrv 

[EMAIL PROTECTED]@ cce   ^_^



-- 
Anthony Fok Tung-LingCivil and Environmental Engineering
[EMAIL PROTECTED], [EMAIL PROTECTED]University of Alberta, Canada
Come visit Our Lady of Victory Camp -- http://www.olvc.ab.ca/