Re: Are bad developer libraries the problem with M$ software?

Dullien@gmx.net wrote:

>> * StackGuard <http://immunix.org/stackguard.html>: buffer overflow
CoreSDI included our response to their investigation in their security report
<http://cert.uni-stuttgart.de/archive/bugtraq/2002/04/msg00347.html>. Problems #2, #3, and #4 are going to be fixed in StackGuard 3 (which is now in late alpha testing in our lab) and probolem #1 is outside StackGuard's design scope.

Crispin

-- 
Crispin Cowan, Ph.D.
Chief Scientist, WireX                      
http://wirex.com/~crispin/
Security Hardened Linux Distribution:       
http://immunix.org
Available for purchase: 
http://wirex.com/Products/Immunix/purchase.html
			    Just say ".Nyet"