the importance of using safe interprocess communication
Ben Escoto
bescoto@stanford.edu
Fri, 08 Feb 2002 00:18:56 -0800
--==_Exmh_2048581172P
Content-Type: text/plain; charset=us-ascii
>>>>> "JH" == Jamie Heilman <jamie@audible.transient.net>
>>>>> wrote the following on Thu, 7 Feb 2002 23:52:47 -0800
JH> Yeah I saw that upon further evaluation, however I assure you
JH> escaping shell code is not the answer to this problem and will
JH> only lead to more security holes. Using the correct kind of
JH> system call is. I'm still working on a patch of some type,
JH> though your's should get me through the night's backups.
Hmm, how is the patched version vulnerable to security holes?
--
Ben Escoto
--==_Exmh_2048581172P
Content-Type: application/pgp-signature
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.0.6 (GNU/Linux)
Comment: Exmh version 2.5 01/15/2001
iD8DBQE8Y4ns+owuOvknOnURAhs4AJ41pjgXqAmdQU8oU2CpnEn0gcUNzACdGD8x
K/Eu5wCmGmGQaf8OUye4KuU=
=ie3e
-----END PGP SIGNATURE-----
--==_Exmh_2048581172P--