Bugtraq mailing list archives
Re: Buffer overflow prevention
From: Jedi/Sector One <j () pureftpd org>
Date: Thu, 14 Aug 2003 22:15:03 +0200
On Thu, Aug 14, 2003 at 10:17:29PM +0300, Timo Sirainen wrote:
AFAIK all those combined do bring real security against generic exploits.
"Real security" is not the word. PaX / Propolice / W^X / non-exec stacks don't solve bugs. What they do is to _abort_ execution of a process when it behaves abnormally. So instead of giving attackers the opportunity to run arbitrary code, you only give them the ability to cause a denial of service. This kind of protection should be coupled with tools that automatically restart daemons when they crash (ex: daemontools and monit) to actually keep the service running when under attack. Still, all of this is a couple of unreliable band-aids. -- __ /*- Frank DENIS (Jedi/Sector One) <j () 42-Networks Com> -*\ __ \ '/ <a href="http://www.PureFTPd.Org/"> Secure FTP Server </a> \' / \/ <a href="http://www.Jedi.Claranet.Fr/"> Misc. free software </a> \/
Current thread:
- Re: Buffer overflow prevention, (continued)
- Re: Buffer overflow prevention Patrick Dolan (Aug 14)
- Re: Buffer overflow prevention Jedi/Sector One (Aug 14)
- Re: Buffer overflow prevention Stephen Clowater (Aug 14)
- Re: Buffer overflow prevention Peter Busser (Aug 15)
- Re: Buffer overflow prevention Solar Designer (Aug 15)
- Re: Buffer overflow prevention Peter Busser (Aug 15)
- Re: Buffer overflow prevention Mariusz Woloszyn (Aug 14)
- Re: Buffer overflow prevention Theo de Raadt (Aug 14)
- Re: Buffer overflow prevention Matt D. Harris (Aug 14)
- Re: Buffer overflow prevention sauron (Aug 14)
- Re: Buffer overflow prevention Timo Sirainen (Aug 14)
- Re: Buffer overflow prevention Jedi/Sector One (Aug 14)
- Re: Buffer overflow prevention Peter Busser (Aug 15)
- Re: Buffer overflow prevention Theo de Raadt (Aug 14)
- Re: Buffer overflow prevention Jedi/Sector One (Aug 14)
- Re: Buffer overflow prevention Miod Vallat (Aug 14)
- Re: Buffer overflow prevention Peter Busser (Aug 15)
- Re: Buffer overflow prevention stealth (Aug 15)
- Re: Buffer overflow prevention Mark Tinberg (Aug 18)
- Re: Buffer overflow prevention Crispin Cowan (Aug 18)
- Re: Buffer overflow prevention Peter Busser (Aug 18)