RE: remote memory reading through tcp/icmp

From: Michael Wojcik (Michael.Wojcikat_private)
Date: Tue Jan 22 2002 - 14:20:13 PST

Next message: Martin Mačok: "Re: remote memory reading through tcp/icmp (linux)"

Previous message: Jeff Mills: "RE: Citrix NFuse 1.6"
Maybe in reply to: Andrew Griffiths: "remote memory reading through tcp/icmp"
Next in thread: Casper Dik: "Re: remote memory reading through tcp/icmp"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

> From: David LeBlanc [mailto:dleblancat_private]
> Sent: Sunday, January 20, 2002 6:27 PM

> The operating system should be clearing memory belonging to one
> process before handing it to another. If its not doing that, then
> there's a bigger problem than just this.

Indeed, this is a requirement of Orange Book C2 security (the "Object Reuse"
requirement).  I realize the Rainbow Series is more or less passe, but the
point is this is a long-standing security principle.  

Michael Wojcik
Principal Software Systems Developer, Micro Focus
Department of English, Miami University

Next message: Martin Mačok: "Re: remote memory reading through tcp/icmp (linux)"
Previous message: Jeff Mills: "RE: Citrix NFuse 1.6"
Maybe in reply to: Andrew Griffiths: "remote memory reading through tcp/icmp"
Next in thread: Casper Dik: "Re: remote memory reading through tcp/icmp"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

This archive was generated by hypermail 2b30 : Tue Jan 22 2002 - 14:50:16 PST