Socket security

From: - (cbdeja_at_my-deja.com)
Date: 11/21/03 

Date: 21 Nov 2003 03:43:50 -0800

I have a UNIX client program which connects to a port of a server
program (running on a Windows NT machine if it matters). My client
program sends a string of text through the socket and then performs a
read() to get a response string back from the server program. The
client program then closes the connection.

It is possible for an unrelated program (not running on the client
machine) to send garbage to the client program via its client socket,
or is the connection completely private between the client and server
program?

I'm trying to ascertain whether a malicious program can pose a threat
to the client machine by sending "garbage" to the client program via
an already established socket connection to a benign server program.

If it is possible, what can I do to reduce the threat?

Thanks

Relevant Pages

  • [PATCH 0/5] [RFC] AF_RXRPC socket family implementation [try #3]
    ... These patches together supply secure client-side RxRPC connectivity as a Linux ... kernel socket family. ... presentation side is left to the client. ... Each connection goes to a particular "service". ...
    (Linux-Kernel)
  • [PATCH 0/5] [RFC] AF_RXRPC socket family implementation
    ... These patches together supply secure client-side RxRPC connectivity as a Linux ... Make it possible for the client socket to be used to go to more than one ... Each connection goes to a particular "service". ...
    (Linux-Kernel)
  • [PATCH 0/5] [RFC] AF_RXRPC socket family implementation [try #2]
    ... These patches together supply secure client-side RxRPC connectivity as a Linux ... Make it possible for the client socket to be used to go to more than one ... Each connection goes to a particular "service". ...
    (Linux-Kernel)
  • Re: Writing a windows service with a socket interface.
    ... It's FAR easier than direct socket ... > and sends a response back to the client. ... Or perhaps if the IP address of the server was modified ... > connection open, I would implement a sort of connection pool of course. ...
    (microsoft.public.dotnet.framework)
  • Cable modem/router causes error 10054, "Connection was forcibly reset by remote host"
    ... If there is no activity on the socket for five minutes, ... no resets are issued by our server or anything else visible on the wire. ... same to be true with an FTP client accessing an FTP site totally unrelated ... client, made five unsuccessful attempts to use its existing connection, then ...
    (microsoft.public.win32.programmer.networks)