Skip site navigation (1)Skip section navigation (2)
Date:      Wed, 31 Jan 1996 14:30:09 -0500
From:      "Garrett A. Wollman" <wollman@lcs.mit.edu>
To:        Paul Traina <pst@cisco.com>
Cc:        security@freebsd.org
Subject:   [cisco.external.bugtraq] Re: BoS: bind() Security Problems
Message-ID:  <9601311930.AA00772@halloran-eldar.lcs.mit.edu>
In-Reply-To: <199601311854.KAA05100@puli.cisco.com>
References:  <199601311854.KAA05100@puli.cisco.com>

next in thread | previous in thread | raw e-mail | index | archive | help
<<On Wed, 31 Jan 1996 10:54:27 -0800, Paul Traina <pst@cisco.com> said:

> Yuck, I hate to think of what we're going to break when we fix this, but
> we should definitely fix this, otherwise users can hose NFS & friends.

Lots of stuff will get broken.  Although, it occurs to me...

It should be possible to require that SO_REUSEPORT be specified on
both the original and the duplicate sockets.  This way, those programs
(like ALL UDP-based servers) for which this is a requirement will
still be able to work with a minimum of modification.  We can't,
however, require any modifications where multicast addresses are
involved.

-GAWollman

--
Garrett A. Wollman   | Shashish is simple, it's discreet, it's brief. ... 
wollman@lcs.mit.edu  | Shashish is the bonding of hearts in spite of distance.
Opinions not those of| It is a bond more powerful than absence.  We like people
MIT, LCS, ANA, or NSA| who like Shashish.  - Claude McKenzie + Florent Vollant



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?9601311930.AA00772>