Bugtraq mailing list archives

Re: /usr/bin/doscmd on BSDI


From: bostic () BSDI COM (Keith Bostic)
Date: Thu, 18 Mar 1999 12:16:03 -0500


I don't believe that there is a security problem in doscmd.  By the time
that doscmd can be affected by an overflow, permissions have been re-set
to the user's, with no dangerous file descriptors open.

(That's not to say the buffer overflows shouldn't be fixed, of course.)

Regards,
--keith

=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=
Keith Bostic                    bostic () bsdi com



Current thread: