OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
Bugtraq archives for 4th quarter (Oct-Dec) 1994: Re: /dev/tcp, and a LD_LIBRARY_PATH question.

Re: /dev/tcp, and a LD_LIBRARY_PATH question.

Robert M. Haas (rhaascygnus.arc.nasa.gov)
Sat, 03 Dec 1994 18:42:21 -0800 

> A better solution is to smash the _entire_ environment flat, except for
> specific ones, such as TZ, that can be reasonably assumed to be safe (I
> hope - anyone broken into a system with the TZ variable? :-)

I'm not even sure this is sufficient. This only works if LD_LIBRARY_PATH
is not consulted until after you squash the environment. Is this true? 

(If not, you'd have to write a statically linked program to squash the
environment and then exec() the real executable...)

...Robert