Re: Multiple OS kernel insecure handling of stdio file descriptor

[Shiva Persaud <shivapd () austin ibm com>]

On Thu, Jan 18, 2007 at 10:21:52PM +0800, XFOCUS Security Team wrote:
> XFOCUS team (http://www.xfocus.org/)  had discovered Multiple OS kernel
> insecure handling of stdio file descriptor.
>
> ===================
> Affected OS Version
>
> AIX 5.3

The AIX Security Team can be reached at security-alert () austin ibm com.

We have investigated this issue and AIX is not affected. A privileged
process will not inherit closed file descriptors for stdio, stdout and
stderr.

Thanks,
Shiva Persaud


-- 

Shiva Persaud / AIX Security Development

Attachment: _bin
Description:

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/