Darrell Burkey wrote:
> There is also a documented exploit (see AUSCERT) with an older version of
> bind8 with this exact symptom. I think it's a buffer overflow technique.
Probably *IS* a buffer overflow exploit.
Given that a v.large percentage of *nix exploits are indeed
buffer overflows, perhaps its time to start an open source audit of
all source code and look for the damn things. Many are quite obvious
to spot, i.e. strcpy(), strcat(), etc, instead of strncpy().
BTW: if the suspect code is re-writtento take advantage of "a little
bit of C++", and replace all statis and dynamic string buffers with
instances of the string class, the buffer overflow problem vanishes
instanatly. Stroustrup has pointed this out countless times, but no-one
in open source seems to be listening <sigh>.
-rickw
--
Rick Welykochy || Praxis Services Pty Limited
--
SLUG - Sydney Linux Users Group Mailing List - http://www.slug.org.au
To unsubscribe send email to [EMAIL PROTECTED] with
unsubscribe in the text
