[lkml]   [1999]   [Dec]   [30]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
Messages in this thread
SubjectRe: Unexecutable Stack / Buffer Overflow Exploits...
On Thu, 30 Dec 1999, Damien Miller wrote:
> Date: Thu, 30 Dec 1999 15:10:41 +1100 (EST)
> From: Damien Miller <>
> To: Gregory Maxwell <>
> Cc: Horst von Brand <>,
> Robert Dinse <>,
> Subject: Re: Unexecutable Stack / Buffer Overflow Exploits...
> Hash: SHA1
> On Wed, 29 Dec 1999, Gregory Maxwell wrote:
> > The effectiveness of this patch comes from two places:
> >
> > A) It's rare and breaks all existing attacks.
> > B) I actually makes that class of attack harder to accomplish.
> C) It warns you when a buffer overrun attempt has been made,
> which alerts you to the problem and gives you a chance to fix
> or disable the offending program.
> Regards,
> Damien Miller

In the event when the attacker is stupid enough to launch from a dial-up
of an ISP, and I do see this frequently, it gives you a chance to kill the
offending account.

When they use a previously compromised host as a platform to launch their
attack from, it gives you the chance to notify the admin of that host so they
can secure it.

To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to
Please read the FAQ at

 \ /
  Last update: 2005-03-22 13:55    [W:0.126 / U:1.584 seconds]
©2003-2018 Jasper Spaans|hosted at Digital Ocean and TransIP|Read the blog|Advertise on this site