|
[Date Prev] [Date Next] [Thread Prev] [Thread Next] [Date Index] [Thread Index]
|
Re: [Plug] Crashing Linux
|
well it has more to do with platform than anything, pentiums with all
thier legacy 8086 code compatability will overflow just fine, motorolas
from the 68000 on, had the ability to mark sections of the stack for
superuser status only, thus making them nonexecutable to other processes
with out that permission. "superuser" was a term thet they came up with and
has little to do with the unix superuser.
sparcs on the other hand, motorola 68888, have the ability to also mark
sections of the stack nonexecutable, and prevent non root users from
creating an exploit, though i fear its not impossible.
openBSD is trying to create a c library that doesn't overflow, by checking
for this flaw at compile time, but its only a tought so far.
there is stackguard for linux, which thries to achieve the same thing
though i don't know the specifics of how it works.
over-and-out
-----Original Message-----
From: Nick R <laktar@hotmail.com>
To: plug@lists.nothinbut.net <plug@lists.nothinbut.net>
Date: Thursday, August 19, 1999 10:23 PM
Subject: [Plug] Crashing Linux
>My programming prof started talking about stack overflows today in class
and
>I commented that you probably couldn't do that in Linux, that it would just
>shut down the program. Well I telnetted into my box at home and tried it
out
>for him. Sure enough I got a segmentation fault and the program exited,
>leaving my computer up and running sans problems. It got me thinking. What
>does it actually take to crash a Linux box? I'd assume you wouldn't be able
>to just write to memory in kernel space or something like you could in W95
>and the like. Short of modifying the kernel code what does it take to crash
>a Linux box & is there any way to do this w/o root access?
>
>
>_______________________________________________________________
>Get Free Email and Do More On The Web. Visit http://www.msn.com
>
>_______________________________________________
>Plug maillist - Plug@lists.nothinbut.net
>http://lists.nothinbut.net/mail/listinfo/plug
_______________________________________________
Plug maillist - Plug@lists.nothinbut.net
http://lists.nothinbut.net/mail/listinfo/plug
|
|