lkml.org 
[lkml]   [1997]   [Jun]   [7]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
 
Messages in this thread
/
DateSat, 7 Jun 1997 21:20:32 +0200
FromMartin Mares <>
SubjectRe: Non-executable stack patch
Hi,

> And I forgot to mention one more requirement: the vulnerable binary has to
> be dynamically linked for this exploit method to work. Otherwise only the

Probably almost nobody links everything running with root priveleges
statically...

> functions that the program actually uses are available in the exploit, so
> that creating a generic exploit isn't possible. Also, it is only possible
> to return into _one_ libc function (well, there's a special case when that
> function got exactly one argument), so stuff like open() a file and write()
> there will not work. This means some statically linked vulnerable programs

execv() is often sufficient...

[snip]

Martin

\
 
 \ /
  Last update: 2005-03-22 13:39    [from the cache]
©2003-2010