Bugtraq mailing list archives

Sun's Loadmodule Patch

From: neil () legless demon co uk (Neil Woods)
Date: Thu, 19 Oct 1995 00:37:52 +0100


Sun's loadmodule fix replaces the insecure call to system(3) with calls to
vfork(2) and execle(3) (apparently execle(3) is used in order to specify
a null environment).

This is effective measure to fix loadmodule, uname(2) is still the most
elegant fix which has been overlooked.

Cheers,

Neil
--
Let the Mystery Be, So Watcha Want, Longing In Their Hearts, Hate My Way,
M-Bike, Safari, Uncle June and Aunt Kiyoti, Daisy Dead Petals, Tuff Gnarl.

     ...like a badger with an afro throwing sparklers at the Pope...

Current thread:

Re: Netscape 2.0b1 for Win95 (fwd) Aleph One (Oct 09)
- Sendmail 8.7, 8.7.1 Charles Howes (Oct 09)
  - Re: Sendmail 8.7, 8.7.1 Casper Dik (Oct 10)
    - Re: Sendmail 8.7, 8.7.1 SnoCrash (Oct 10)
    - Re: Sendmail 8.7, 8.7.1 Andrew Cameron (Oct 10)
    - Netscape problems (again)... Jay 'Whip' Grizzard (Oct 10)
    - s-bits disappear ? Bernd Lehle (Oct 11)
    - Re: s-bits disappear ? Neil Readwin (Oct 12)
    - Sun's Loadmodule Patch Neil Woods (Oct 18)
    - FW: WinNews Special Issue Scott Chasin (Oct 22)
    - SunOS 5.5 Beta Aleph One (Oct 24)
    - denial of service attack possible Mark Thomas (Oct 26)
    - Re: denial of service attack possible Darren Reed (Oct 27)
    - Re: denial of service attack possible Darrell Fuhriman (Oct 27)
    - Re: denial of service attack possible Tom Fitzgerald (Oct 27)
    - Re: denial of service attack possible Michael R. Widner (Oct 27)
    - Re: denial of service attack possible Nathan Lawson (Oct 27)