lkml.org 
[lkml]   [1997]   [Jun]   [4]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
 
Messages in this thread
/
From
SubjectRe: Non-Executable Stack Patch
Date
> The advantage of the patch is that it will stop the current set of
> attacks that take the form of "find buffer overrun in a program",
> followed by "apply standard toolkit to exploit buffer overrun by putting
> executable code on the stack".
>
> The disadvantage of the patch is that after we apply, within a few
> months we will see a new toolkit of the form "corrupt the stack to point
> the return address into someplace entertaining in libc --- like right
> before an an execl call in the implementation of popen()."
>
> The danger is people thinking that with this patch, they don't need to
> worry about finding and fixing buffer overrun bugs in their code....

Theo is right. Especially because that placebo fix of disabeling of
execution on the stack will not be possible on all architectures.
Recent postings to bugtrack like
<Pine.A41.3.95.970524155438.20452B-100000@t1.chem.umn.edu> support his
point of view. Certain operating systems like IRIX were simply protected
from that type of attack we're discussing because few of the bad guys
understood the issues so far ...

Ralf

\
 
 \ /
  Last update: 2005-03-22 13:39    [W:0.053 / U:0.516 seconds]
©2003-2020 Jasper Spaans|hosted at Digital Ocean and TransIP|Read the blog|Advertise on this site