Packet Storm - Information Security News, Files, Tools, Exploits, Advisories and Whitepapers http://packetstormsecurity.org/ en-us Mon, 28 May 2012 12:25:18 GMT 144400 http://packetstormsecurity.org/ http://www.google-analytics.com/__utm.gif?utmwv=1.3&utmn=1842711018&utmcs=ISO-8859-1&utmsr=31337x31337&utmsc=32-bit&utmul=en-us&utmje=0&utmfl=-&utmcn=1&utmdt=Files%u2248%20Packet%20Storm&utmhn=packetstormsecurity.org&utmr=-&utmp=%2Fmag%2Ffk%2Ffk8.addition.txt%2F&utmac=UA-18885198-1&utmcc=__utma%3D32867617.1842711018.1338207918.1338207918.1338207918.1%3B%2B__utmz%3D32867617.1338207918.1.1.utmccn%3D(direct)%7Cutmcsr%3D(direct)%7Cutmcmd%3D(none) http://packetstormsecurity.org/files/11040/fk8.addition.txt http://packetstormsecurity.org/files/11040/fk8.addition.txt http://packetstormsecurity.org/files/11040/fk8.addition.txt.html Tue, 28 Dec 1999 08:28:20 GMT Every single file available on buffer overflow mentions that strcpy(), etc, but for some reason no one has noticed that 'cin >>' is also a problem. cin is an extremely commonly used function in C++ code, and it ought to be more widely known that the favoured use of it is insecure. Ditto for improper use of an ifstream.