hacking security forum

Re: [Full-Disclosure] Re: [ GLSA 200402-02 ] XFree86 Font Information File Buffer Overflow

From: Evert Daman <linux@digipix.org>
Date: Thu Feb 12 2004 - 13:40:24 EST

> > Fatal server error:
> > Caught signal 11. Server aborting
> >
> > no segfault or something...
>
> hahahaha...give me a shell i'll check it out!!

people can't make mistakes without anybody making
fun off them :P

i copy paste the wrong lines. if logged in on the console
i get a segfault. using ssh i get:

[evert@server evert]$ X :0 -fp $PWD
Authentication failed - cannot start X server.
Perhaps you do not have console ownership?
[evert@server evert]$

so my real question was... is it still remotely (using a php
include with apache or something) to exploit the bug?

kind regards,
Evert

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html
Received on Thu Feb 12 15:16:52 2004

This archive was generated by hypermail 2.1.8 : Thu Feb 12 2004 - 16:01:02 EST

Custom Search