<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META http-equiv=Content-Type content="text/html; charset=iso-8859-1">
<META content="MSHTML 6.00.2800.1400" name=GENERATOR>
<STYLE></STYLE>
</HEAD>
<BODY bgColor=#ffffff>
<DIV><FONT face=Arial size=2>Oliver,</FONT></DIV>
<DIV><FONT face=Arial size=2></FONT> </DIV>
<DIV><FONT face=Arial size=2>Quickly testing the below string at the command
line does crash perl.exe. I have ActivePerl 5.8.0 Build 805 install on a
Windows 2000 machine.</FONT></DIV>
<DIV><FONT face=Arial size=2></FONT> </DIV>
<DIV><FONT face=Arial size=2>perl -e "$a="A" x 256; system($a)"<BR></DIV></FONT>
<DIV> </DIV>
<DIV><FONT face=Arial size=2>-----Original Message-----<BR>From: <A
href="mailto:Oliver@greyhat.de">Oliver@greyhat.de</A> [mailto:Oliver@greyhat.de]
<BR>Sent: Monday, May 17, 2004 4:24 PM<BR>To: <A
href="mailto:full-disclosure@lists.netsys.com">full-disclosure@lists.netsys.com</A><BR>Cc:
<A
href="mailto:bugtraq@securityfocus.com">bugtraq@securityfocus.com</A><BR>Subject:
Buffer Overflow in ActivePerl ?</FONT></DIV>
<DIV><FONT face=Arial size=2></FONT> </DIV>
<DIV><FONT face=Arial size=2>hi folks,</FONT></DIV>
<DIV> </DIV>
<DIV><FONT face=Arial size=2>i played around with ActiveState's ActivePerl for
Win32, and crashed <BR>Perl.exe with the following command:</FONT></DIV>
<DIV> </DIV>
<DIV><FONT face=Arial size=2>perl -e "$a="A" x 256; system($a)"</FONT></DIV>
<DIV> </DIV>
<DIV><FONT face=Arial size=2>I wonder if this bug isnt known?!? Because system()
is a very common <BR>command....<BR>Can anybody reproduce this?</FONT></DIV>
<DIV> </DIV>
<DIV><FONT face=Arial size=2>I put together a little advisory on my website,
including version <BR>information and a debugger output (Drwatson):</FONT></DIV>
<DIV> </DIV>
<DIV><FONT face=Arial size=2> <A
href="http://www.oliverkarow.de/research/ActivePerlSystemBOF.txt">http://www.oliverkarow.de/research/ActivePerlSystemBOF.txt</A></FONT></DIV>
<DIV> </DIV><FONT face=Arial size=2>
<DIV><BR>PS: Due to travel activity, i will not be able to respond to
mails <BR>within the next 8 days!</DIV>
<DIV> </DIV>
<DIV>Regards,</DIV>
<DIV> </DIV>
<DIV>Oliver<BR></FONT></DIV></BODY></HTML>