Home page logo
/

bugtraq logo Bugtraq mailing list archives

Re: Buffer overflow prevention
From: Timo Sirainen <tss () iki fi>
Date: Thu, 14 Aug 2003 22:17:29 +0300

On Thursday, Aug 14, 2003, at 20:26 Europe/Helsinki, Mariusz Woloszyn wrote:

On Thu, 14 Aug 2003, Stephen Clowater wrote:

Also, you can use chpax, and turn on a non-executable stack, and with a small
It's been proved many times that non-executable stack adds NO security at
all.
Every single class of vulnerabilities exploitable with executable stack
can be also exploited with non-executable stack.

What he forgot to mention is that PAX and grsec also gives you non-executable heap and randomized address bases to prevent return-to-libc attacks. AFAIK all those combined do bring real security against generic exploits.


  By Date           By Thread  

Current thread:
[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]