Interesting People mailing list archives
Windows 2003 Server - Defeating the stack protection mechanism
From: Dave Farber <dave () farber net>
Date: Fri, 12 Sep 2003 21:44:37 -0400
Reply-To: "monty solomon" <monty () roscom com> From: "monty solomon" <monty () roscom com> http://www.securityfocus.com/archive/1/337127 From: "NGSSoftware Insight Security Research" <nisr () nextgenss com> Subject: Windows 2003 Server - Defeating the stack protection mechanism Date: Thu, 11 Sep 2003 15:40:20 +0100 For those interested, NGSS has just published a paper describing how to defeat the mechanism built into Windows 2003 Server to prevent exploitation of stack based buffer overflow vulnerabilities. Previous work done in this area presented methods that only worked in highly specific scenarios - the new methods presented in this paper are generic. The paper can be downloaded from http://www.nextgenss.com/papers/defeating-w2k3-stack-protection.pdf . Cheers, David Litchfield NGSSoftware Ltd http://www.nextgenss.com/ +44(0)208 401 0070 ------------------------------------- You are subscribed as interesting-people () lists elistx com To manage your subscription, go to http://v2.listbox.com/member/?listname=ip Archives at: http://www.interesting-people.org/archives/interesting-people/
Current thread:
- Windows 2003 Server - Defeating the stack protection mechanism Dave Farber (Sep 12)