Messages in this thread | | | Subject | Re: Is there any Buffer overflow attack mechanism that can break a vulnerable server without breaking the ongoing connection? | From | Arjan van de Ven <> | Date | Tue, 27 Dec 2005 15:23:30 +0100 |
| |
On Tue, 2005-12-27 at 12:18 -0200, nashleon@gmx.de wrote: > Arjan van de Ven escreveu: > > >buffer overflows do not break connections, and as such I think you are > >out of luck. > >Having said that.. on modern linux distros it's pretty hard to do a > >buffer overflow exploit nowadays (NX[1] to make stacks non-executable, > >randomisations, compiler based detection (via FORTIFY_SOURCE and/or > >-fstackprotector)... add all those together and it's certainly not easy > >to do this.... > > > > > > > >[1] or emulations of NX such as segment limits techniques > > > > > > > > Hello! > > Locally is very simple to exploit buffer overflows in the linux kernel.
sure kernel space is a whole different kettle of fish. The good news there however is that in kernel space it's rather rare to work with buffers on the stack (by virtue of only having a really tiny stack in the first place). Not impossible but at least rare.
- To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to majordomo@vger.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html Please read the FAQ at http://www.tux.org/lkml/
| |