Of course it's possible to write something that's not exploitable.
However, it's tougher than most people think. For example, I've seen
applications that the authors assumed were not networked whatsoever,
and had no special local privilege. However, if the files they read
and wrote were stored on a remote file system such as an SMB mount,
then their otherwise non-networked program was completely exploitable.
John
On Friday, December 27, 2002, at 07:46 AM, Rahul Chander Kashyap wrote:
> Hi people,
Received on Fri Dec 27 14:48:16 2002
This archive was generated by hypermail 2.1.8
: Wed Aug 23 2006 - 14:02:44 EDT
|