Bugtraq mailing list archives
Re: PointGuard: It's not the Size of the Buffer, it's the Address of the Pointer
From: Florian Weimer <fw () deneb enyo de>
Date: Fri, 15 Aug 2003 15:43:42 +0200
Crispin Cowan <crispin () immunix com> writes:
Thanks to Snax and the Shmoo for a better tag line: It's not the Size of the Buffer, it's the Address of the Pointer
This is not true. There are buffer overflow exploits which do not modify pointers, but other objects. The most prominent example is probably the "c c c c c..." exploit for the Solaris /bin/login vulnerability.
Current thread:
- PointGuard: It's not the Size of the Buffer, it's the Address of the Pointer Crispin Cowan (Aug 14)
- Re: PointGuard: It's not the Size of the Buffer, it's the Address of the Pointer Florian Weimer (Aug 15)
- Re: PointGuard: It's not the Size of the Buffer, it's the Address of the Pointer Crispin Cowan (Aug 15)
- Message not available
- Re: PointGuard: It's not the Size of the Buffer, it's the Address of the Pointer Crispin Cowan (Aug 15)
- Re: PointGuard: It's not the Size of the Buffer, it's the Address of the Pointer Crispin Cowan (Aug 15)
- Re: PointGuard: It's not the Size of the Buffer, it's the Address of the Pointer Florian Weimer (Aug 15)