[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: C Compiler



On Wed, May 26, 2004 at 09:36:52AM -0600, s. keeling wrote:
> Usenix' ;login: had an article recently discussing this sort of
> vulnerability.  If you're letting just anyone at your C compiler, you
> MAY be facilitating exploits.

I suppose any access is more of a security risk.  But if someone can
gain access via a network then it seems like they could also probably
compile a program elsewhere and bring it in also.

> Personally, I'd tend to think that once they're in, all bets are off
> and locking down the C compiler is the least of your problems.

Exactly.

-- 
Bill Moseley
moseley@hank.org



Reply to: