CVE-1999-1158

/* source: wwwsecurityfocuscom/bid/201/info There is a buffer overflow condition on arguments in Pluggable Authentication Modules (PAM) and unix_scheme (54 and 53) Therefore, an unauthorized user could exploit this vulnerability via the passwd program to gain root access Under SunOS 551, 551_x86, 55, 55_x86, yppasswd and nispass ...

---------------------------- file newpassc ------------------------------- #include <stdioh> #include <syslogh> #define hidden_passwd "/bin/hpasswd" /*change here */ #define MAX_LENGTH 32 void main(int argc, char *argv[]) { int i; char *args[10]; if(argc < 10) { args[0]=hidden_passwd; ...