Re: iSeries buffer overflow immunity?

[Rich Duzenbury <rduz-midrange@xxxxxxxxxxxxxxxxxxx>]

On Mon, 2004-11-08 at 16:32, Barbara Morris wrote:
> Rich Duzenbury wrote:
> > 
> But working from that assumption, and further assuming you aren't going
> to recompile the program before attacking it, you could still figure out
> the storage layout by using %ADDR in the debugger.  This could be done
> non-interactively using the debugger APIs.  (If you are going to
> recompile the program as part of the attack, might as well just write a
> new program.)
Agreed.  Seems like RPG programs are 'virtually impossible' to exploit
remotely, especially without intimate knowledge of the object.  Now, on
to 'C' programs.

Hmm, how come there isn't a white paper at ibm.com that shows how
awesome the iseries is at automatically fending off what are major
security problems on other platforms?


--
Regards,
Rich

Current Conditions in Des Moines, IA
Clear
Temp 39.2F, Windchill 33.1F
Winds out of the Southeast at 9mph