[lkml]   [1999]   [Dec]   [28]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
Messages in this thread
    SubjectRe: Unexecutable stack
    Steve VanDevender <> said:


    > In theory it is possible to write executable code into a buffer
    > in the data segment and overflow a buffer in the stack so that
    > the stack frame contains a return address that points into that
    > data. In practice it is much harder to create an exploit with
    > this method as it requires quite detailed knowledge of the data
    > segment layout.

    Yep, it is somewhat harder, and thus not done regularly by crackers today,
    as this is rarely needed now. If/when this becomes common, the cracks will
    become common too. Then we are where we started. Better than buying (false)
    security is to fix the affected programs.
    Dr. Horst H. von Brand
    Departamento de Informatica Fono: +56 32 654431
    Universidad Tecnica Federico Santa Maria +56 32 654239
    Casilla 110-V, Valparaiso, Chile Fax: +56 32 797513

    To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
    the body of a message to
    Please read the FAQ at

     \ /
      Last update: 2005-03-22 13:55    [W:0.033 / U:125.464 seconds]
    ©2003-2016 Jasper Spaans. hosted at Digital OceanAdvertise on this site