On Tue, 23 May 2000, Rick Welykochy wrote:
> > There is also a documented exploit (see AUSCERT) with an older version of
> > bind8 with this exact symptom. I think it's a buffer overflow technique.
>
> Probably *IS* a buffer overflow exploit.
>
> Given that a v.large percentage of *nix exploits are indeed
> buffer overflows, perhaps its time to start an open source audit of
> all source code and look for the damn things. Many are quite obvious
> to spot, i.e. strcpy(), strcat(), etc, instead of strncpy().
Bell Labs have recently GPLd a library that is supposed to provide extra
security against buffer overflows from certain "unsafe" C functions. The
library is a shared library and intercepts function calls to these unsafe
C functions; you do not have to recompile your programs. I seem to remember
that at least one Linux distribution (Corel?) is going to include LibSafe.
See
http://www.bell-labs.com/org/11356/libsafe.html
for more details.
Rob.
--
SLUG - Sydney Linux Users Group Mailing List - http://www.slug.org.au
To unsubscribe send email to [EMAIL PROTECTED] with
unsubscribe in the text
