Login or Register to Ask a Question and Join Our Community


Security Advisories (RSS) - Microsoft

Microsoft Security Advisory (2269637): Insecure Library Loading Could Allow Remote Code Execution -


Login to Discuss or Reply to this Discussion in Our Community

 
Thread Tools Search this Thread
Special Forums Windows & DOS: Issues & Discussions Security Advisories (RSS) - Microsoft Microsoft Security Advisory (2269637): Insecure Library Loading Could Allow Remote Code Execution -
# 1  
Old 02-08-2011
Microsoft Security Advisory (2269637): Insecure Library Loading Could Allow Remote Code Execution -
Revision Note: V5.0 (February 8, 2011): Added Microsoft Security Bulletin MS11-003, "Cumulative Security Update for Internet Explorer," to the Updates relating to Insecure Library Loading section. Advisory Summary:Microsoft is aware that research has been published detailing a remote attack vector for a class of vulnerabilities that affects how applications load external libraries.

More...
Login or Register to Ask a Question

Previous Thread | Next Thread
Login or Register to Ask a Question

LEARN ABOUT OSF1

get_num_crypts

get_num_crypts(3)					     Library Functions Manual						 get_num_crypts(3)

NAME

       get_num_crypts, get_crypt_name - determine the encryption types available (Enhanced Security)

LIBRARY

       Security Library (libsecurity.so)

SYNOPSIS

       #include <prot.h>

       int get_num_crypts(void);

       const char *get_crypt_name(
	    int cryptnum);

PARAMETERS

       cryptnum
	      The encryption algorithm for which the name is to be returned.

DESCRIPTION

       The  get_num_crypts()  function returns the number of encryption algorithms which the current system supports.  This value is non-negative,
       and at least four.

       The get_crypt_name() function returns a pointer to static storage containing the name of the encryption	algorithm  with  the  index  value
       given  in  the  cryptnum parameter.  Other calls to get_crypt_name() could overwrite the stored name, so applications should copy the names
       this function returns if there is a chance that other parts of the application might also call this function.  This function  returns  NULL
       if  the	given algorithm index is negative or if it is not less than the return value of get_num_crypts().  Algorithm indexes are most com-
       monly obtained from the fd_oldcrypt and fd_newcrypt fields of an extended profile entry.

       The dxaccounts system management GUI uses the get_num_crypts() and get_crypt_name() functions to determine  how	to  display  the  menu	of
       allowable encryption algorithms for ENHANCED security.

RETURN VALUES

       The get_num_crypts() function returns a non-negative value which is at least four.

       The get_crypt_name() function returns a name for a known encryption algorithm, or a NULL pointer if the given index is out of range.

NOTES

       In order to quickstart a program, the program must be linked as follows:

	    -lsecurity -ldb -laud -lm

       See the shared library discussion in the Programmer's Guide for more information about using the quickstarting feature.

RELATED INFORMATION

       getespwent(3), getesdfent(3), dispcrypt(3), dxaccounts(8)

       Security delim off

																 get_num_crypts(3)