Re: m4 format string vulnerability [was: Re: SuSe / Debian man package ...]

2001-02-04 Thread starman jones 

"m4 -G %n" will make m4 seg fault on SuSE 6.4 (without the "" ofcourse)

sorry for the mistake
feh

sj
_
Get Your Private, Free E-mail from MSN Hotmail at http://www.hotmail.com.

Re: m4 format string vulnerability [was: Re: SuSe / Debian man package ...]

2001-02-04 Thread Ivo van Poorten 

On Saturday 03 February 2001 14:54, Mike Gerber wrote:
 confirmed for red hat linux 7.0:

 [kerouac:mg:~]m4 -G %x
 m4: 80499d9: Datei oder Verzeichnis nicht gefunden
 [kerouac:mg:~]cat /etc/redhat-release
 Red Hat Linux release 7.0 (Guinness)
 [kerouac:mg:~]rpm -q m4
 m4-1.4.1-3

Same here:

[ivo@vanity ~]$ m4 -G %x
m4: 80497fb: No such file or directory
[ivo@vanity ~]$ rpm -q m4
m4-1.4-17mdk
[ivo@vanity ~]$ cat /etc/mandrake-release
Linux Mandrake release 7.2 (Odyssey) for i586

--Ivo

--
If the Windows desktop starts to topple, it's like a redwood tree.
It takes a long time for it to fall, but it's really hard to stop once
it starts. -- Carl Howe.

m4 format string vulnerability [was: Re: SuSe / Debian man package ...]

2001-02-03 Thread Mike Gerber 

On Fre, Feb 02, 2001 at 09:36:29 +0100, Tomasz Kuniar wrote:
 The same problem in most (all?) distributions is with m4 - GNU macro
 processor code, when trying use -G option:

 mezon@beata:~$ m4 -G %x%x%x%x
 m4: 40012a48380491e00: No such file or directory

confirmed for red hat linux 7.0:

[kerouac:mg:~]m4 -G %x
m4: 80499d9: Datei oder Verzeichnis nicht gefunden
[kerouac:mg:~]cat /etc/redhat-release
Red Hat Linux release 7.0 (Guinness)
[kerouac:mg:~]rpm -q m4
m4-1.4.1-3

--
mike gerber