Re: Solaris 2.3 login

[jatipper () vnet IBM COM (jatipper () vnet IBM COM)]

From: John Tipper, Open Client/Server Group
*** Resending note of 12/08/94 13:44
Classification:  -- NONE --
Subject: Core Dumps

Hi,

I'm new to this area, and to butraq, so please bear with me if this note
is in the wrong format, or doesn't belong here.

Can someone please explain what the security implications are if a
program results in a coredump? I have discovered several programs here on
my machines that can result in these.  How could an intruder use these to
gain access?  What are the best ways of combatting this?

Thanks,


John Tipper

John Tipper, Open Client/Server Group,
Prototyping Team, 5B1 Sudbury
Telephone: ext 081 869 5222    int 7-355222
9TIPPEJ at CROVM3        jatipper () vnet ibm com