format string exploitation

[the_JinX]

While surfing over to check out my friends @ www.netric.org I found a nice tutorial by The Itch on format string exploitation.

functions vulnerable to wrong formatting are:

fprintf();
printf();
sprintf();
snprintf();
vfprintf();
vprintf();
vsprintf();
vsnprintf();
setproctitle();
syslog();
and many others like err*, verr*, warn* and vwarn*.

Read it all here

[phaza7]

Man U got love coding! great info.

[ammo]

Hey the_JinX, thanks! I had only heard of format string exploits but hadn't found any detailed info on it!

Ammo

[neel]

There are may more and many other programming languages wich have the same problem. If you think abit about it there are more commands that are exploitable then there are who aren't (on the more davanced programming languages).

[cnfat]

ddd