lkml.org 
[lkml]   [1998]   [Aug]   [7]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
 
Messages in this thread
/
Date
SubjectRe: Stack Smashing and no-exec
From
On 7 Aug 1998, H. Peter Anvin wrote:
> No it cannot (unless there is a kernel bug, of course.) The problem
> occurs with poorly written setuid programs or as-root-running daemons,
> where an unprivileged user manages to inject data that somehow causes
> the privileged program to take an unauthorized action.

You say "poorly written". The trouble is, essentially all setuid
programs or as-root-running daemons are poorly-written enough to have
buffer-overflows in them. The only one I know about that hasn't had
them yet is qmail-lspawn.

Kragen


-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@vger.rutgers.edu
Please read the FAQ at http://www.altern.org/andrebalsa/doc/lkml-faq.html

\
 
 \ /
  Last update: 2005-03-22 13:43    [W:0.454 / U:0.132 seconds]
©2003-2020 Jasper Spaans|hosted at Digital Ocean and TransIP|Read the blog|Advertise on this site