Multiple compilers "erased" memory reading
Published:		30.10.2002
Source:		MICROSOFT
SecurityVulns ID:		2377
Type:		library
Level:		5/10
Description:		Multiple secure programs use something like memset(buf, 0, len) to erase keys, passwords, etc from memory. The problem is this code can be eliminated by compiler during optimization process.

Files:		Some Bad News and Some Good News
Discuss:		Read or add your comments to this news (0 comments)

syslog-ng buffer overflow updated since 10.10.2002
Published:		30.10.2002
Source:		BUGTRAQ
SecurityVulns ID:		2342
Type:		remote
Level:		5/10
Description:		Buffer overflow in parsing $HOST variable in configuration file.

Affected:		SYSLOGNG : syslog-ng 1.4
		SYSLOGNG : syslog-ng 1.5

Original document		ENGUARDE, [ESA-20021029-028] syslog-ng: buffer overflow in macro handling code (UPDATED) (30.10.2002)
		Holtzl Peter, syslog-ng buffer overflow (10.10.2002)

Discuss:

Read or add your comments to this news (0 comments)