OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
Subject: Re: Solaris libc locale bug exploit against non-exec stack
From: Christopher Allen Wing (wingcENGIN.UMICH.EDU)
Date: Mon Nov 20 2000 - 07:44:49 CST


Several people have pointed out that I'm a moron and that an empty string
is a valid name for an environment variable. :)

So, please disregard the previous message. It doesn't fix the
vulnerability in libc.

Thanks,

Chris Wing
wingcengin.umich.edu