Notes for October 11, 1999

1.	Greetings and Felicitations!

2.	Puzzle of the Day

3.	Robust Programming

a.	Cover the robust versions of the routines

b.	Error handling

4.	Common Implementation Vulnerabilities

a.	Unknown interaction with other system components (DNS entry with bad names, assuming finger port is fin-
ger and not chargen)

b.	Overflow (year 2000, lpr overwriting flaw, sendmail large integer flaw, su buffer overflow)

c.	Race conditions (xterm flaw, ps flaw)

d.	Environment variables (vi one-upsmanship, loadmodule)

e.	Not resetting privileges (Purdue Games incident)