[31195] in bugtraq
Re: PointGuard: It's not the Size of the Buffer, it's the Address
daemon@ATHENA.MIT.EDU (Florian Weimer)
Fri Aug 15 12:10:17 2003
To: bugtraq@securityfocus.com
From: Florian Weimer <fw@deneb.enyo.de>
Date: Fri, 15 Aug 2003 15:43:42 +0200
In-Reply-To: <3F3ACD7E.8080201@immunix.com> (Crispin Cowan's message of
"Wed, 13 Aug 2003 16:45:02 -0700")
Message-ID: <87smo3yr1t.fsf@deneb.enyo.de>
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Crispin Cowan <crispin@immunix.com> writes:
> Thanks to Snax and the Shmoo for a better tag line: It's not the Size
> of the Buffer, it's the Address of the Pointer
This is not true. There are buffer overflow exploits which do not
modify pointers, but other objects. The most prominent example is
probably the "c c c c c..." exploit for the Solaris /bin/login
vulnerability.
