Bug#4332: Vulnerability in the Xt library (fwd)

[Owen Dunn <owen@greenend.org.uk>]

On Thu, 29 Aug 1996, Marek Michalkiewicz wrote:

> Package: xlib
> Version: 3.1.2-7
> 
> It seems there is a buffer overrun in libXt, which may be a security
> hole (some programs using libXt, such as xterm, are setuid root).
> I haven't tried to exploit it, but xterm -fg very_long_string
> segfaults, so it might be exploitable (stack overwrite).  See the
> attached message (which appeared on the bugtraq list) for a patch.

I'm currently trying to clear some of Steve Early's backlog of X
package bugs; this'll be among them (though it may be a while longer
before the packages get converted to the new source format.)

(S)