<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
		>
<channel>
	<title>Comentarios en: Computer Associates eTrust InoTask.exe Antivirus Buffer Overflow Vulnerability</title>
	<atom:link href="http://blog.48bits.com/2007/05/11/computer-associates-etrust-inotaskexe-antivirus-buffer-overflow-vulnerability/feed/" rel="self" type="application/rss+xml" />
	<link>http://blog.48bits.com/2007/05/11/computer-associates-etrust-inotaskexe-antivirus-buffer-overflow-vulnerability/</link>
	<description>48Bits ... The one and a half architecture land.</description>
	<lastBuildDate>Wed, 08 Sep 2010 09:03:34 +0000</lastBuildDate>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
	<generator>http://wordpress.org/?v=3.0.1</generator>
	<item>
		<title>Por: flo</title>
		<link>http://blog.48bits.com/2007/05/11/computer-associates-etrust-inotaskexe-antivirus-buffer-overflow-vulnerability/comment-page-1/#comment-41111</link>
		<dc:creator>flo</dc:creator>
		<pubDate>Sun, 20 Sep 2009 18:47:23 +0000</pubDate>
		<guid isPermaLink="false">http://blog.48bits.com/?p=103#comment-41111</guid>
		<description>snip from your exploit
//////////////
		if   (   (p[0] == 0xFF) &amp;&amp; 
			     (p[1] == 0x54) &amp;&amp; 
			     (p[2] == 0x24) &amp;&amp; 
			     (p[3]==0x8) )
		{
			retval = p;
			break;
		}
/////////////////////

0x54 = 84 decimal
0x24 = 36 decimal
84 - 36 = 48 decimal

NICE work !</description>
		<content:encoded><![CDATA[<p>snip from your exploit<br />
//////////////<br />
		if   (   (p[0] == 0xFF) &amp;&amp;<br />
			     (p[1] == 0&#215;54) &amp;&amp;<br />
			     (p[2] == 0&#215;24) &amp;&amp;<br />
			     (p[3]==0&#215;8) )<br />
		{<br />
			retval = p;<br />
			break;<br />
		}<br />
/////////////////////</p>
<p>0&#215;54 = 84 decimal<br />
0&#215;24 = 36 decimal<br />
84 &#8211; 36 = 48 decimal</p>
<p>NICE work !</p>
]]></content:encoded>
	</item>
	<item>
		<title>Por: tom</title>
		<link>http://blog.48bits.com/2007/05/11/computer-associates-etrust-inotaskexe-antivirus-buffer-overflow-vulnerability/comment-page-1/#comment-40462</link>
		<dc:creator>tom</dc:creator>
		<pubDate>Wed, 25 Jun 2008 21:06:52 +0000</pubDate>
		<guid isPermaLink="false">http://blog.48bits.com/?p=103#comment-40462</guid>
		<description>[…] the full story here Der Beitrag wurde am Monday, den 22. October 2007 um 14:43 Uhr veröffentlicht und wurde […]</description>
		<content:encoded><![CDATA[<p>[…] the full story here Der Beitrag wurde am Monday, den 22. October 2007 um 14:43 Uhr veröffentlicht und wurde […]</p>
]]></content:encoded>
	</item>
	<item>
		<title>Por: 0x90</title>
		<link>http://blog.48bits.com/2007/05/11/computer-associates-etrust-inotaskexe-antivirus-buffer-overflow-vulnerability/comment-page-1/#comment-40062</link>
		<dc:creator>0x90</dc:creator>
		<pubDate>Fri, 18 May 2007 11:29:19 +0000</pubDate>
		<guid isPermaLink="false">http://blog.48bits.com/?p=103#comment-40062</guid>
		<description>Lindo blog.. :)  


Salu2!</description>
		<content:encoded><![CDATA[<p>Lindo blog.. <img src='http://blog.48bits.com/wp-includes/images/smilies/icon_smile.gif' alt=':)' class='wp-smiley' />   </p>
<p>Salu2!</p>
]]></content:encoded>
	</item>
	<item>
		<title>Por: Aceites</title>
		<link>http://blog.48bits.com/2007/05/11/computer-associates-etrust-inotaskexe-antivirus-buffer-overflow-vulnerability/comment-page-1/#comment-39763</link>
		<dc:creator>Aceites</dc:creator>
		<pubDate>Fri, 11 May 2007 10:31:17 +0000</pubDate>
		<guid isPermaLink="false">http://blog.48bits.com/?p=103#comment-39763</guid>
		<description>Estáis apañaos.</description>
		<content:encoded><![CDATA[<p>Estáis apañaos.</p>
]]></content:encoded>
	</item>
	<item>
		<title>Por: aceite</title>
		<link>http://blog.48bits.com/2007/05/11/computer-associates-etrust-inotaskexe-antivirus-buffer-overflow-vulnerability/comment-page-1/#comment-39760</link>
		<dc:creator>aceite</dc:creator>
		<pubDate>Fri, 11 May 2007 09:29:26 +0000</pubDate>
		<guid isPermaLink="false">http://blog.48bits.com/?p=103#comment-39760</guid>
		<description>JA KER

XDDDDDDD</description>
		<content:encoded><![CDATA[<p>JA KER</p>
<p>XDDDDDDD</p>
]]></content:encoded>
	</item>
</channel>
</rss>
