Open source application with stack overflow exposure

[screamingterror]

Hi everyone,
Does anyone know of any applications on the web that have stack overflow vulnerabilities? I'm learning IT security and need to be able to download an application on my local box and try to find the exposure. I'm just having a hard time finding something out there...

Any guidance would be greatly appreciated.

Thanks in advance!

[MaxIBoy]

Open Source applications don't usually have known bugs, because they get fixed by people such as yourself.

Be a white-hat cracker. Get an old box set up as a server with an assortment of programs, ssh in every once in a while and try to gain root access. If you succeed, fix the bug and submit a patch.

You'll get experience, and the application developer will be grateful.

[doas777]

check out the US-CERT for threat advisories. xine and xine-lib were noted as having numerous heap overflow vulnerabilities last week, but it's not web-facing.

good luck with your studies. that sounds like a really kewl lab!