[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: Solaris 10 Port Stealing Vulnerability
- To: "Chris O'Regan" <chris@xxxxxxxxxxxxxxxxx>
- Subject: Re: Solaris 10 Port Stealing Vulnerability
- From: Casper.Dik@xxxxxxxxxx
- Date: Thu, 31 Mar 2011 17:18:38 +0200
>Imagine if you find a Solaris system running a web server that has a
>remote exploit which allows for the execution of arbitrary code. If the
>web server happens to be listening on the wildcard interface than you
>can very easily insert your own web server in front of it!
There SO_EXCLBIND setsockopt in Solaris which protects hijacking the port.
Casper