90954 2003-02-17 23:33 /16 rader/ nesumin <nesumin@softhome.net> Importerad: 2003-02-17 23:33 av Brevbäraren Extern mottagare: bugtraq@securityfocus.com Mottagare: Bugtraq (import) <3532> Kommentar till text 90152 av nesumin <nesumin@softhome.net> Ärende: Re: Opera Username Buffer Overflow Vulnerability ------------------------------------------------------------ Hello. I found the little mistake in my exploit source file, Sorry. It is out of the Exploit routine. (about links of "Version.lib") And I attached the fixed version of it. -------- Now. OperaSoftwareASA have not fixed this vulnerability, yet. -------------------------------------------------- nesumin <nesumin@softhome.net> (90954) /nesumin <nesumin@softhome.net>/------------ Bilaga (application/octet-stream) i text 90955 90955 2003-02-17 23:33 /23 rader/ nesumin <nesumin@softhome.net> Bilagans filnamn: "030217_o6unexp.tgz" Importerad: 2003-02-17 23:33 av Brevbäraren Extern mottagare: bugtraq@securityfocus.com Mottagare: Bugtraq (import) <3533> Bilaga (text/plain) till text 90954 Ärende: Bilaga (030217_o6unexp.tgz) till: Re: Opera Username Buffer Overflow Vulnerability ------------------------------------------------------------ Q>o6unexp.tarí;ksâHóÕÑÿ!ñI¶âaðÏòÓìbã3ØÓsm!Caä+ cßtÿ÷ˬ* I@ÛÝÓs{·i¬ªÊÊweeViÜòÜaO³ìð¿îÉëz¹\=õ¥B±P)JÅJ)_.`ß~E/þ!Kÿ~äÛùÓÏÛ7ÀÿAwÆ<®|æ9æA}>3ºÌÛî§íZA~qÙm^5úhî#9uìzðåÜ Ï!®Ë^»{Î!ÊY}îæ=|¾¤kP;ÙWدTäóf÷bX{n°0=µ^ IÌr¹Åbui4;t§9ÏltÏÎsbèúËçÞ{æîó à]ÿ¬cËfLL.ÄÀ{ÀEh62CÓf±ÉNFÌ̺#6»g¸ê·öòåì þùFll9øhÚs¤?5±kƸby´<×2'XßïÀs4òïÃØs§ðìÎ=²©ZcÈüjôkÍæe&¦¿á1'd YíªWûÕ¡ß´äÎÙ<L©= íW5B{pº O¨õûÆy~èWÍ.wûP«_õè¿k÷ÐBMÖ)Ñã&øætfqû»ÓpÂ-çç6YñβàyC U*lcÂ=ø?|@µÍ\Ç·ÄX ¥ú2õÏí`U_¤ápîy°\d2óRwýwµóôyÕжëYÎê¬Ûl·ÚF º^Ìé ~¸B.ÊWЩåæGC¶¯FhxE]bvó)È¿ùî8¸SuXpÊAèçÛè×êJ·°{ûæí\þÁ'XÆ#Èf³Ú?ìïµ.ð÷Òèã¯ã΢ÿ°IËãßlø@z´ G9 zvò°ùÙ)ÄP¸ÃY{¡Þ|AD5f£ñõ®8n ùR¹¨.)[ éÓÊDǾ&àѧÒ'9åj}E0zèO÷h7t¬k9¸b7qÇö|Ä@ÒñÑô§1>µ âOñ?%]tîK ú²1ùÄF¦úlën¥=ñ>Õ¹2u<t;Õ75mÛòNì^¶PÚÛçÅp½?÷ ápÝÈM Y¦YA Søþ¬3ØÓywnkFhqfÙmÃ~VÏòûÙ²^9\ Aþ~vÁ%ÙÒ*£\iê¥D§[kvÚõËÚåï¨e) Tîz UôÃRcÉçáÆüY±R6¯oøà&Æê-³§bc&ÉZ½ÕªT*ûú X9+ Ã=ùøú2õVé 7_¦^®TÚ/S/ 3I)Áûè]ä_`õ¹_3ö_`ÁÍÃrþ¬^Vx[|QHá ôÃpcEÜäôlËd1z`GH«S«AÇ8ÿµÿéäQÈí31çÁÙ'é&9#kgg4¸sá.å[Èã*GçR1Ü\øn«Õ3ú[[ rT:bPTâ4w ªB;q>£Ä®0ô4x!OàãÐàS¦x_du|ð¯a5¥ûWfÊ!V»Ó1¿5ÞÕ¸çbÏÇqw¼®u®:ÐùÿnqØý½w¦Ïx9ñÐc°/K¹¬óQîM«¹ëÛ7sLîiCNLOìÐn«l¡öô'£;Ð~~ø[èAoEúiâO=?¥þ4iÏ2¨ïÞ|+Ш® ÔhÕhÞpPQê¼D?Ô¤¾:½Õj«?@Éir¶øÛ>'Wùå͵´VÉÔëe½®ÅRL©½LI \¥ô"HÉ #ÈQ {l¨MxË«ØÄÖX×yB<!{Âm¬Èir[FôF?eJ`*ä ò2£¢^R½øb4ù#fËÄheÞ!<àpå 5Mz»¼@ɧ"ùðrR%?Ô ìßkò2`X®`]#30ß¾b½@R»¼V0sôáªÈqæzNo¼'#8kN1d¹{ìsë±zA¬Ö{ÁóÝd@6q `OA°sR>ª¢½ÉÄV`³Ó×÷'9½K±wçãÌç_AOî<1÷X$¸cÐÅ~a:ÃëáûF æI}91sHj±áG,¿P%±GöÍ Ñßr¨¤ÅIÎøíbTã±×0eMïÁ÷ßÂÂl¸#m6vÝÏðNÓÿfY§XÃÊ:ñ$GíMSFÌ-=ò{-åv|~m\ö½ö[¢üI;î0Äàíèä +lô!k·X¸ý^¼¾}u[¬âèÛ.æ;Óê²]ª¯t7¢yîPEÆ]k3¬Æ+H¡6õ¥é]aóe%)è4 zøÖ󨹵ÎvÀwçÞi.^ùõ8gjZB/¦w?Ô$ |üp Ð-rTÌfØ»óZI¡¨â ¨Ò&RvÁÛª¤cÝy¦÷ÂÅÒö$ì¯,¸@=ÕäÑVu%}'608(Ä:üX exÄòVL¥$êÖǹçNÏ2ª ï µ«XÈFÞ=Ú(VÅs*?Æl¿Wí´haWR5boÌù+X3Ï Ó/Çq,çÎ(¤Ë,Á{^ò¾:[ðqÜG¸-ÿ¬¼Ç¹ZEgeZá53c£ë§' cp¤äOÄ/~\`aÝ+6QÀ¬B±ªú1Xp¯öìÛrûní,»A°£*Å®¥¢¤FU0¶c©8÷ýZL2'[J%OQùãP6Üfåv¿yj %f²8ÈÐI¼jÙ¥¾Ý]ÎE}JaÈ^²V»;Õ½<áÈ¥Ï3ÌL,t:A[Á:sy îÉVBõxå'h Àª |.WqVð)[__ |)Ц¯"UÏ«I%}U¨Ê¦ÃÙshx¨ÂHÔÐjóÑú7ÎLó·Zf/£Â/¸ÆgÌ:!³¸Ãî#ÉÀÊc ¡x1\,<sJ:ÈnMà®V9_ÛÛäSäWáGó®V5èêísÃ*ºþ"u%Ew!ÕFn$?íNA¡D,©°¬ÂŲCv¿]XBCÄ1íX(ç]\$»Pï)+À¬B¦Ãñ¹Ì +øÏÈhV-hÀ- ìIH¦wtd»«E¦ÆLt$Õ¤G:±]¬¥Òiýß/-cã!©t)R¢tE]KH(À}ô (XGþ&;ÐlQéycÔ^àbÆÈ¢H$)ç_Å\>ÉYþ+ÙPbrx \ÂÆða©Êc˳ þï[H [ø?b*QÏ×Z"0zÝ8â®ÁÜd~öo2´ýóYÕªõ2½~³{ÕÏ }láÈuѬ³V!eküjly#CÒ]]àº<âgFÎCÛõ1ø NK ?Ë3ú@^4q Í¢Ò:.9Á{{O%ýÌ´<8Rù<$E%ùB} »g¦¶b Ä ô¥d¿}>Xæû²ñRÊ`±¬?jÄ_äô!cã0Á¯êÚþ³£(-©TuøôiÛ*Híå¥N~Dn$©ÑfópgÝ-Ò6÷ßÀ]ífÌÑTÌc´Û{pâËÜàU¸óù÷Jvwo I©*n/ÔW*ÓÓUÝ*Ø¡/.½å!ôµPòÇÂ`Ó=Ênà ºOð-ϧøÂç×ÔD·¬/âX1l¸ßÚnwð-Ï'^¬ÇÈMv®ü:=±ð;ð« hòg2§ËÆ\®úçylÊOPì°ÅpÍLo8¡«iñ9Gü.v!>¡IÝÐÎ|sfñ¾ø¯Døí¬Ä~/<âXw¦´Ó´í Kæ¶JNßYf4ºuâ0¡OÄ ¾±A©}?²âMsôHÜFmk:£Óé²éÚ,>~eOxh(!Ó ,¦([R¨¹t#¤Ú|üçõWAQê@$Í`D´¨µ_ºyj#xxõ©®¨=mÞÙ¬AÛ@òÙDoù& N .E"m¦ub \?XÖ`ZJ5fíU ðk1^¹ðìì+1ôWb.é_«ý×jc?ĬÆ$:ã·âò::maçµèSÖ®&$Fq5}&¹á`ê¯ëµýØ9$:xUO> ¬X¬Iò4iBý×½A«ýÞhÒ fû¼Õ Gÿî¬Û¼ê0ÁB³ØiCMÉHÑxxQࣦù[÷² ÊoXþ^´ag<£CÚÎØí!5Ué\ôúZçOG}P²°£&O8 ~º¶¬"ëÝnçÂQNRþv.®»ío¤¿6ÂüçyÏ×ô=NMv¤´PpjÀvqÕ>ï¿~i&,@ÈõLùæzeÈ$VÎçùfó7¾oðã4¾xèq3]UÝG9Õл·'*?í~¹F¥@ÅïÙ,Ú}¸ë·¼*äNç§eEH"¬enn2ÚöãXÛæE·äêCöÇ{§£EþYï8d¯êD@¸> /űÇxñ.ÜGôòÈõ&VgË$ÿ1'µÞeÓvÎØtMÉä&Vaõõ´)Qb´¬®°/Ràù7¹¤ì`/@ÖEA@Iд,B,§K4)WÎ0éðq:Á5M1* ¿.ÅHÖJTª< Õ,» uööâÍÏÒ ¦#l(J¯_ë_õµFÃèõ×ín§Æ¿åEÑs .Ñ óEág¿ñ¾a\ÔÀxo4®úÆà]í¼Ù1.á(6Öè÷ÛçWÆ gÔ.ï6?FD¨Î¯ Ç^[®mò¾ û@ç§`¨±³ 5Åÿ¯øh¬¹æãcýU ×}±Û4íau·úT~ûb{6&{ÌÒUæV·'¿ç ñAìø-p8ª2áMÌã@{IXãIÙ¦ùb o:âä5=<SâM5Ú%ÅT<VÓö¨ZEôV÷òlÀ?pÿ<F=ïÓ0lE2ó &¹+QÖD[ñÚ ðÌÍmFr{Sîª"üL¨qZR;âò`k-Ø´Iq~ø.¹2GrÝfY'¡ý¢Ë±Ô qù¥M\Ö0È[òLä6±cl`ZÁÎù¿ÃYæ_k!mk<4éRòÀK²ÿì?i?üQ Ý?qlÂãJ<KuEä8µ,9bwܦ%´X=õp«TºCz¬!¡Ô.Ê.c{á6fÛ¶âX-~¯ÊÏ'ßÃÏïo2Åe%E}øy ÿ£ÓKg+Á*ßu=tE ¥Ý¢ù nª§§/«<¹ná£eQC±×@ØKH¦åiW¸¯®ßG¹c¦OÃÕwøÄWqÖ½ü}P¯õÚþòLÄðåZüVç} ÷^[^07mª(Üs«áMÛwwÔKvÎEîúo?ýÞ~úYl¤ÎâÛçªÅÒµ-UÿxA&ñÍö+%ÂBãuF\1 ÒFÍ]§ç¸×i9¥äøwk'ù¥Nµ{rÉ%2m{¹>ÐrÕàJØ$lyüyôQ2 t|ÛVÄÁ¿úÿüÿðüËd;< (90955) /nesumin <nesumin@softhome.net>/--(Ombruten)