Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com

Neohapsis > Archives > Bugtraq> 1994_4

Bugtraq archives for 4th quarter (Oct-Dec) 1994: Re: /dev/tcp, and a LD_LIBRARY_PATH question.

Re: /dev/tcp, and a LD_LIBRARY_PATH question.

James R. Ault (aultcs.albany.edu)
Tue, 06 Dec 1994 12:23:08 EST

Messages sorted by: [ date ][ thread ][ subject ][ author ]
Next message: Stephen Palmer: "ANSI Bombs (was:Got this - not sure of authenticity.)"
Previous message: Bonfield James: "Solaris ff.core and wsinfo commands."
Maybe in reply to: That Whispering Wolf...: "/dev/tcp, and a LD_LIBRARY_PATH question."
Next in thread: Pat Myrto: "Re: /dev/tcp, and a LD_LIBRARY_PATH question."

> Its a good idea to write a routine to scrub *ALL* LD_* environment
> varibles first thing in any SUID program.  ESPECIALLY any that
> exec's another program with any kind of privilege.

The LD_* variables don't affect statically linked binaries, do they?

Jim Ault, CS Sysadmin, SUNY Albany, NY 12222 USA  aultcs.albany.edu   <><

Next message: Stephen Palmer: "ANSI Bombs (was:Got this - not sure of authenticity.)"
Previous message: Bonfield James: "Solaris ff.core and wsinfo commands."
Maybe in reply to: That Whispering Wolf...: "/dev/tcp, and a LD_LIBRARY_PATH question."
Next in thread: Pat Myrto: "Re: /dev/tcp, and a LD_LIBRARY_PATH question."