(RADIATOR) Buffer Overflow in Radius

[sj at datanet.hu]

Buffer overflow occurs if the app tries to put more data
to the buffer than its length.

Perl is different from C, Perl automatically manages buffers, you
don't have worry about buffer overflow until you don't execute other
program from your Perl script.

BTW, if you stick to C, try some compiler enhancements such as StackGuard
and make your stack non-executable (this won't prevent _all_ the buffer
overruns but will help a lot). If you're running Linux 2.2.x you can try
Solar Designer's openwall kernel patch

SJ.

Vajon mit eszik egy ilyen macska ?
Csak nem az uj kitekatot extra joghurttal ?

On Tue, 10 Jul 2001 Michael.Bomba at hqasc.army.mil wrote:

> the xforce iss site indicates there is a possible buffer overflow
> vulnerability in two radius packages they tested.  They did not test
> radiator.
>
> Attached is the link to the iss site:
> http://xforce.iss.net/alerts/advise87.php
>
> Do we know if Radiator is susceptible to this vulnerability?
>
>
> ===
> Archive at http://www.open.com.au/archives/radiator/
> Announcements on radiator-announce at open.com.au
> To unsubscribe, email 'majordomo at open.com.au' with
> 'unsubscribe radiator' in the body of the message.
>

===
Archive at http://www.open.com.au/archives/radiator/
Announcements on radiator-announce at open.com.au
To unsubscribe, email 'majordomo at open.com.au' with
'unsubscribe radiator' in the body of the message.