|
Bugtraq
mailing list archives
Re: A vulnerability in Lynx (all versions)
From: deraadt () CVS OPENBSD ORG (Theo de Raadt)
Date: Mon, 5 May 1997 17:08:30 -0600
Fix: Why don't people like using mktemp() or tmpfile() ?
mktemp() isn't a solution, since it is still raceable.
mkstemp() is the solution.
In OpenBSD we've killed about 400 or so of these; some exploitable,
some perhaps not.
By Date
By Thread
Current thread:
- Re: Solaris lpNet & temp files (exploit), (continued)
Re: Buffer Overflows: A Summary Thomas H. Ptacek (May 02)
|