RE: remote memory reading through tcp/icmp

[Michael Wojcik <Michael.Wojcik () microfocus com>]

> From: David LeBlanc [mailto:dleblanc () mindspring com]
> Sent: Sunday, January 20, 2002 6:27 PM

> The operating system should be clearing memory belonging to one
> process before handing it to another. If its not doing that, then
> there's a bigger problem than just this.

Indeed, this is a requirement of Orange Book C2 security (the "Object Reuse"
requirement).  I realize the Rainbow Series is more or less passe, but the
point is this is a long-standing security principle.  

Michael Wojcik
Principal Software Systems Developer, Micro Focus
Department of English, Miami University