|
-
February 4th, 2007, 03:21 PM
#8
Hi
I like your approach to learn the issue of buffer overflows. As per answering
your question:
Simply spoken, all buffer overflows have in common that you are using some
fixed buffer or you allow the user (or service) to specify the buffer to be
allocated. While the latter seems strange, still nowadays some (older)
applications are in use, which actually trust their clients, allowing for this
scenario.
Because of this generic character, it is thus impossible to give a complete
list (I wouldn't be able to) - sure, check for strcpy, scanf etc. but, more
general, check for all parts in your code where user (or service/protocol/...)
input from "outside" is used - directly, or more difficult to detect, indirectly.
For example, with your little server - what happens with the recv-buffer?
When do you use it, where does it have some impact?
Furthermore, which OS do you use, which Programming Language, which
Framework? It all depends - in particular the existence of a vulnerability:
even if you have found a security flaw, a vulnerable state, which
allows to reach a compromised state using authorised transitions, may not
exist at all.
If you post reasonable code-snippets, I will try to have a look at it 
Cheers, and good luck.
P.s. Nowaday, fuzzers become more and more popular. What kind of protocol
are you using? You may find one, which will be appropriate to find some flaw
in your program.
If the only tool you have is a hammer, you tend to see every problem as a nail.
(Abraham Maslow, Psychologist, 1908-70)
Similar Threads
-
By hatebreed2000 in forum Microsoft Security Discussions
Replies: 6
Last Post: July 23rd, 2003, 12:53 AM
-
By micael in forum AntiOnline's General Chit Chat
Replies: 1
Last Post: June 7th, 2002, 08:07 AM
-
By zigar in forum Network Security Discussions
Replies: 0
Last Post: May 29th, 2002, 04:04 PM
-
By s0nIc in forum Miscellaneous Security Discussions
Replies: 0
Last Post: February 12th, 2002, 06:26 AM
Posting Permissions
- You may not post new threads
- You may not post replies
- You may not post attachments
- You may not edit your posts
-
Forum Rules
|
|