Re: The 99,999-bug question: Why can you execute from the stack?

[ Available lists | Index of freebsd-security | Month of Jul 1998 | Week of 19 Jul 1998 | Raw email | View thread | Wrap long lines | Reply | Tag ]
From
Brett Glass <brett@lariat.org>
Date
19 Jul 1998 15:18:45
Subject
Re: The 99,999-bug question: Why can you execute from the stack?
Message-ID
199807192218.QAA03558@lariat.lariat.org


[ Hide this part ]
At 10:43 PM 7/19/98 +0000, you wrote:

>Making the stack non executable doesn't stop buffer overflow attacks;
>see www.geek-girl.com/bugtraq/ for more information.

It should stop most of them. I could imagine a situation where one
subverted a program by changing its data (for example, one could
force commands into an interpreter by putting them into higher
stack frames).

However, the most common method seems to be to plant a bogus return
address that points to machine code that does the cracker's bidding.

--Brett


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe security" in the body of the message


Elapsed time: 0.103 seconds