Bugtraq mailing list archives

Re: Multiple OS kernel insecure handling of stdio file descriptor

From: Shiva Persaud <shivapd () austin ibm com>
Date: Fri, 19 Jan 2007 17:19:32 -0600

On Thu, Jan 18, 2007 at 10:21:52PM +0800, XFOCUS Security Team wrote:


XFOCUS team (http://www.xfocus.org/)  had discovered Multiple OS kernel
insecure handling of stdio file descriptor.

===================
Affected OS Version

AIX 5.3


The AIX Security Team can be reached at security-alert () austin ibm com.

We have investigated this issue and AIX is not affected. A privileged
process will not inherit closed file descriptors for stdio, stdout and
stderr.

Thanks,
Shiva Persaud


-- 

Shiva Persaud / AIX Security Development

Attachment: _bin
Description:

Current thread:

Multiple OS kernel insecure handling of stdio file descriptor XFOCUS Security Team (Jan 18)
- Re: Multiple OS kernel insecure handling of stdio file descriptor 3APA3A (Jan 18)
- Re: Multiple OS kernel insecure handling of stdio file descriptor Peter Jeremy (Jan 18)
  - Re: Multiple OS kernel insecure handling of stdio file descriptor Carson Gaspar (Jan 22)
- Re: Multiple OS kernel insecure handling of stdio file descriptor Shiva Persaud (Jan 20)
  - Re: Multiple OS kernel insecure handling of stdio file descriptor eugeny gladkih (Jan 23)
    - Re: [Full-disclosure] Multiple OS kernel insecure handling of stdio file descriptor Troy Bollinger (Jan 22)