X-Google-Language: ENGLISH,ASCII-7-bit
X-Google-Thread: f996b,3520009e8fdabe39,start
X-Google-Attributes: gidf996b,public
From: drule@spots.ab.ca (Bruce Leidl)
Subject: Exploiting buffer overflow condition.  How?
Date: 1996/09/01
Message-ID: <50bvgr$53g@nr1.vancouver.istar.net>
X-Deja-AN: 177802882
organization: iSTAR internet Incorporated
newsgroups: alt.ascii-art



oh my.

here is a pic i made the other day using thedraw (it took more than one day
maybe 30 hours ?? i don't know) i made it for a lame bbs i don't like, hence
the krad type. anyway, it's 100 lines and i've cropped off 2 or 3 columns 
from the right side so it would fit. here goesL

   d$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$b       Y$$o   $$$$$$$$$$
   $$$$$OOOOOOO$$$$$$$$$$$$$$$$$$$$$$$$$OOOOOOOO$$$$   $o, `$$$$ ;$$$$$$$$$$
.  $"'.,,oo  ,.   .""YY$$$$$$$$$YY""   .    oo,,.`"$  , Y$L $$$$ ]$$$$$$$$$$
$L$Y$$$$$$P  MMm,,mMMm,.."J$$$"..mMMb,,mMM  Y$$$$$P";$$[ $$;$$$P,$$$$$$$$$$$
$$]$$$$$$$$$$ooo,. `"$$$$$$$$$$$$$"' .,ooo$$$$$$$$$$]$$; $$$$$P.$$$$$$$$$$$$
$$;$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$;$$',$$$$",$$$$$$$$$$$$$
]$ ]$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$[ $[ J$$$$$$$$$$$$$$$$$$$
," ]$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$[ ".J$$$$$$$$$$$$$$$$$$$$
]]; $$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$ ,]]]]"' .,,. `"]]]]]]]]]
]][ $$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$',]]]]' w3lc0M3: `]]]]]]]]
]]]% $$$$$$$$$$$$$$$$$$$p,""""",p$$$$$$$$$$$$$$$$',]]]]] :2 l1qu1D: ]]]]]]]]
]]]]L $$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$' ]]] -- 53p4rA710n, ]]]]]]]
|||||L Y$$$$$$$$$$$$$$P""''''''''"Y$$$$$$$$$$$$',||||||| D3 m057 l33t`||||||
||||||L.`Y$$$$$$$$$$$$oJ$$$$$$$$$Lo$$$$$$$$$P' %|||||||| BB5 1N [4o3]. |||||
||||||||%  "$$$$$$$$$$$$$$L.,,ooO$$$$$$$$P''  %||||||||| =-=-=-=-=-=-=- ||||
||||||||| $o `"Y$$$$$$$$$$$$$$$$$$$$$$$P' o$$ ||||||||||. D45 l337 7b17 ||||
;;;;;;;;; $$$ o,.``"YOO$$$$$$$$$OOP"',,oo $$$ `;;;;;;;;;; 45c11 d0N3 B1 ;;;;
;;;;;;;;  $$$L`$$$$ooo,,,....,,,,ooo$$$$[ $$$[  ;;;;;;;;;; `4r7 l31Gh' ;;;;;
;;;;;;' ,$$$$$L $$$$$$$$$$$$$$$$$$$$$$$P;J$$$$$  ;;;;;;;;;;.`[cC]'96'.;;;;;;
;;;;;; $$$$$$$$$,"$$$$$$$$$$$$$$$$$$$$P;$$$$$$$$  ;;;;;;;;;;;,,..,,,;;;;;;;;
'''''  $$$$$$$$$$o."$$$$$$$$$$$$$$$$$P J$$$$$$$$P     ``'''';;;;;;;;;;;;;;;;
 oooo$$;$$$$$$$$$$$Lo."$$$$$$$$$$$$",o$$$$$$$$P;$$$$$oooo,.. `'''''''`   ';;
$$$$$$$$ $$$$$$$$$$$$$$ `$$$$$$$$$$ "$$$$$$$$P;]$$$$$$$$$$$$$$OOOOO$$$$$o,
$$$$$$$$L $$$$$$$$$$$$', $$$$$$$$$ $$ $$$$$$$ ;]$$$$$$$$$$$$$$$$$$$$$$$$$$$o
$$$$$$$$$. $$$$$$$$$$',J$ $$$$$$$ $;;$ ;$$$$P  ]$$$$$$$$$$$$$$$$$$$$$$$$$$$$
$$$$$$$$$[ ]$$$$$$$",J::"$ $$$$$ $;;;;$ `$$$[  ]$$$$$$$$$$$$$$$$$$$$$$$$$$$$
$$$$$$$$$$; $$$$$7 J];;::$ $$$$ $;;;;;;[ "$$'  $$$$$$$$$$$$$$$$$$$$$$$$$$$$$
$$$$$$$$$$$ $$$$7  `Y]];;$o,..oo$$]]]]Y'  $$  J$$$$$$$$$$$$$$$$$$$$$$$$$$$$$
$$$$$$$$$$$$ $$7     `"Y$$$$;$$$$$$Y"'    $' ,$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$
$$$$$$$$$$$$ $7 .     .  ~^"""""^~ \      " J]$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$
$$$$$$$$$$$$ ",$,  .       |         \,  , ]]]]]$$$$$$$$$$$$$$$$$$$$$$$$$$$$
$$$$$$$$$$$$ ]$|||%,.     .|  .  ,   .,o|||||]]]]$$$$$$$$$$$$$$$$$$$$$$$$$$$
$$$$$$$$$$]]]|||||||||O%x,,....,,,x%O||||||||||]]]$$$$$$$$$$$$$$$$$$$$$$$$$$
$$$$$$$]]]]|||;;;;;;""~            ~"~";;;;;||||]]]$$$$$$$$$$$$$$$$$$$$$$$$$
$$$$]]]]]|||;;;;''    oo$OOO$OOO$oo      ';;;;|||||]]]$$$$$$$$$$$$$$$$$$$$$$
$]]]]||||||;;;'    o$P"., m $ m ,."Y$o,    ';;;;;||||]]]]$$$$$$$$$$$$$$$$$$$
]]]||||;;;;;'   o$"'.o$$$ $ $ $ $$Oo.`"$o    ';;;;;;||||]]]$$$$$$$$$$$$$$$$$
]||||;;;;;;'  ,$',o$]]]$$ ] $ ] $$$$$P ,`$.   ;;;;;;;;||||]]]$$$$$$$$$$$$ $$
||;;;;'      J$ $$||]]]$$ | $ | $$$$P ||$ $[      '';;;;;|||]]]$$$$$$$$$$  $
||;;;'  ,$O$L$[ $||||]]$$ ; $ ; $$$',||||$ $  ,o,    ;;;;;||]]]]$$$$$$$$$
|;;;;  ,P   Y$[ $;;||||$$ . $ . $$[ ||||||$$$P~~YL    ;;;;;||||]]]$$$$$$$
;;;;   $     $[ $;;;||$$P   "   Y$[.`"Y|||||$    Y[   ;;;;;;;|||]]]$$$$$$
;''    [   , $[ $;;;$$"  .,,,,,.  "~Y$o,`|||$ ,   $      '';;;;|||]]]]$$$
   ,$Oo$   $ $[ $  $P  .J$$$$$$$L.    ~Y$ Y|$ $   ][,o$o    ';;;;|||]]$$$;
  ;[   Y,; $;$[ $ $P , $$$$$$$$$$$ ;,   $  ]$;$ .:]$$P ]$     ;;;|||]]]$$;
.  $    $,;]$$[ $ $  ; Y"Y$$$$$P"P ;$,  ] o $$[;;,$$'  $ $    ;;;|||]]$$$;
;.  $,  ;$|]$$' $ $  ; ]," $$$ ",[ ;$$. ] ] $$[|,$P   J' ];   ;;;|||]]]$$[
'  J$$$;;Y$]$$ o$"$  ` "$$$7"Y$$$" ;$$; ] | $$[$$;.  '  $"   .;;;||]]]$$$[
 ,P~  Y$,|Y$$$ $$$$$o,..  Y$i$Y ,;$$$$[ | ; $$[|;;:. ,o""Yo  `;;;||||]]$$[
]$     Y$$$$:$ $$$$$$]]]]."`"'' J$OObooo| : $:$$oooP~     $    ;;;|||]]$$$
$  ,   ;|Y o;$ $$"$"$]]]]||||;:      $"$    $;o $|;:      P    ;;;|||]]$$$
$   YL ;|] $]$,`""""~"~~"""~"""~~,o,.,$,..,o$]$ [P|~~o,.,J'   ;;;||]]]$$$$
$$o.$P||$$ $$$$$$$/~~~^~~^~^~~^~~^"~"~"\$$$$$$$ $$|;; Y$Y  ,.;;;||]]$$$$$$
 $P  ;;o$$ $$$"~"$  l1Qu1D  53p4r4710n  $"~"$$$ $$o;;  "$  ;;;;;|]$$$$$$$$
 $    ';;] $$$"~"$OoxoxccoococnononnmnmO$"~"$$$ [|;'    $   ;;;]]$$$$$$$$$
  $     ;$ ""' $L    ~""""""""""""""~    J$ `"" $;'     $    ;]]]]$$$$$$$$;
 ;$$    $$$$$;|Y$odP$$$$OP$$$Y$$$$$$$OObo$$$$$$$$$L.  ,$P  ;;;]]$$$$$$$$$$;
;;;$$$$P JP  :;$":;||P";;||]|;$|;Y$$$|Y$$$$$|;;' Y$$$$$|||;;$]]]$$$$$$$$$$[
;;;]$'   [    '  ':;P   $;;]L;`$   Y$L;:Y$|Y$      $]]||||]]]]$$$$$$$$$$$$[
||]]$L   `o,      J$    "  $$   ~   $$'  `$; '   $$]]]]]]]]]$$$$$$$$$$$$$$$
|]]]]$$$$$$$$o,,o$$$      ,$$$      ]$$,.o$$$$$$$$$$$$]]]]$$$$$$$$$$$$$$$$$
.  ~"YOO$P Y$$$$$$$$$$ooo$$$$$$$oooO$[AL:CC'96]$$$$$$$$$$$$$OOOOOOOOOOOOOP'
$$OOoooo,   ,,,.....,.  ~"~""^"^"^""^"^""^^"~""~^"""^""~ .,,odOOOOOOOOOb
$$$$$$$$$b   $$$$$$$$$$$$$$OOOOOOOOOOOOOOOOOOOOOOOOOOO$$$$$$$$$$$$P $$$$  ;$
`YOO$$$$$$b  $$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$" JOOOP ;$$
   ,,.... ~  ~~~~~~~~~~~""~"""^"^"^"^"^""^~~"'~^""""~~~~""~~ ~    .,,,   ;$$
o,  $$$$$$b   $$$$$$$OOOOOOY$$$$$$$$$$$OOOOOOOOO$OOO$$$$$$$$$$" .$$OOO  ;$$P
$$L  "~.,o%%%%o,"Y$$ ;;;;;;, Y$]]]]]$$ o%%%%%%% $ %c,,.. ~"Y"  ...,,o%  "' .
P"~,o%;;;;;;;;;;; Y$ ;;;;;;;; $;;;;;$P ;;;;;;;; $ ;;;;;;;% .,%;;;;;;;;   o$$
,c%;;;;%"., ";;||b $ ;;;;;;;; $;;;;$P';;;;;;;;;.` ||||;;;;;;;;;;;;;;;;  $$$$
Y;;;;;% ]$$[ |||||$  |||||||| $]]]$P'|||" , ||||  |||||||||||||||;;;;' .o$$$
 Y;;;||, "',o||||]Pjo,"Y||||| $]]$$'|||| "" ||||  |||% %|||||% %||||'   "$$$
L Y||||||%||||]]]]]]]$b Y|||[ $]$P'o||$$"^~"$||$. :|||$ $||$P $||||P ,     $
$  Y$||||]]P"~ ~"$]]$$$$ ]]]$ $$P,$]||$ d$P $||$; .|||$o.""' $|||$P J[ $b
   ;$]]]]]$ d$$Ob Y$$$$M[ ]]$ $",$]]]]$ `" J$]]]$  ]]]]P[ " ]]]]$P J$; $P
 o; ;$]]]]]L $$$P J$M$MMP J]$o,..,oo,~Y$' J$]]]]$  ]]]$P' ,]]]]]PP.$$;
$$$; ]$]]$$$L ~',m$MMMM' J$$$$$$$$$$$[ P J$]]]]]$  $$$P' ,$$]]]]$ ]P'
$$P   $Y$$$M$Om$MMMMP" JM$M$$$$$$$$$$L ,JM$M$$$$$  $$P ,J$$$$$$$$ "
"  J$ ;$YM$MMMMMMP"  oOMMMMMMMMMM$M$M$ "$MMM$M$$$  $" JM$M$$$$$$$
  $$$$ Y$MMMMP" .oJ$$oo,,.~~"""YMMMMMM b,"MMMMM$M    MMMMMM$M$$M$
 $$$$$$ ""..,oJ$$$$$$$$$"$$$$[  ,o,,..o$$$o,""YMM Lo,.~YMMMMMMM$P
$$$$P]$$$;$$$$$$$$$$$$$$$J ;$[  ]$$$$$$$$$$$$o,." $$$$D. ~""""~
$$$P;J$;$ $$$$$$$$$$$";$P J$$[  ]$$$$$$$$$$$$$$$$$$$P"                .
$$P;J$$   $$$$$$$$$$".$$$$$$$[  ]$$$$$$$$$$$$$$$$$"                 o      `
"' J$$    $$$$$P"$$$  $$$$$$$[  ;$$$$$$$$$$$$$$$$P               O
   "$$     ~YP' J$P  J$$$$$$O;  ;P"~..~Y$$$$$$P"' ,o,        GD           .o
               J'  ,$$'    "$:   ,;;;;;.`$$P'   o'   $,  d$b            .o$$
             .    o$'  ,$$P [   ;;;;;;;;]"           J$$,`"'          ,o$$$$
 :.  .           $"  .;;$$;J[   ;;;;;;;;O$,        ,$$$$O$,         o ;$$$$$
. ..    .  .         ,;,. "$     ;;;;JM;;;"$,    ,$$$$$P   \,     ,]] ;$$$$$
.|||:||||..|||    , `||'   ]    ,;;JMP;;;;;,O$.,$$$$$"     J$$, ,$]][  ;$$$$
::;;;|||||||'  .|||| || ;; ;   ,oJMP;;;;oMP;;;;;  $$$,   ,$$$$$$$]]][  `$$$$
;;;'  .;|'  .||||||||| ;    ,oNMMMM;;oMP;;;;;;;;;  $$$$o$$$$$$$]$]]][   `Y$$
;;  .;;; ~;; ||||||||||   oNMMMMMMMMP" `;;;;;;;;" $$$$$$$$$$$$$$$]]]] .,  `$
;  .;'        '' ;|||' .oMMMMMMMMMP' Y$o,,`~~~',o$$$$$$$$$$$$$$$$]]]] ;$$,
;  ;'            `;|| mMMMMMMMMP'  ~ """Y$$$$$OOOOOO$$$$$$$$$$$]$$]]] :$$$$L
.     .o$$$Mm,    ;;  MMMMMMP'    :::.     ;$ ;:      $  $"$$$$$$OOO$ .]]$$$
     .|]]]]$$M;   ;;;  YMP'        :.      $$$oo,,,JO$$$$P""~   .,oO$  ||]$$
     |||||]]]]   ;;;;;        |||  ..,,ooO$$$$$$$$$$$$P     .,o$$]]]]  ;|]]$
   ; `||||||'  .;;;;;||,    ||||||    ````"""""Y$$$$$$[    ~"Y$$]$]]]  ;||]$






if it isn't expecially apparent to you, i'll describe it as being one guy 
shooting another in the head. anyways, there it is.