[SERVER-8727] Speculative - possible to recover certificate password with gdb? Created: 26/Feb/13  Updated: 08/Mar/13  Resolved: 26/Feb/13

Status: Closed
Project: Core Server
Component/s: None
Affects Version/s: None
Fix Version/s: None

Type: Bug Priority: Major - P3
Reporter: Gregor Macadam Assignee: Unassigned
Resolution: Won't Fix Votes: 0
Labels: None
Remaining Estimate: Not Specified
Time Spent: Not Specified
Original Estimate: Not Specified

Issue Links:
Depends
Related
is related to SERVER-8169 Need alternate password entry mechani... Closed
Operating System: ALL
Participants:

 Description   

Not had time to test this yet - but if we aren't overwriting the memory used to hold the password that is passed in in argv then in theory gdb could be used to recover it.



 Comments   
Comment by Eric Milkie [ 26/Feb/13 ]

You can use gdb to view any contents of memory of a process. You can also change the behavior of a running program by depositing new values in variables at run time.

Generated at Thu Feb 08 03:18:13 UTC 2024 using Jira 9.7.1#970001-sha1:2222b88b221c4928ef0de3161136cc90c8356a66.