Re: buffer overflow - fundamentals

[visi0n <visi0n () AUX-TECH NET>]

        This is a heap overflow, look for traceroute advisory.
===============================================================================
visi0n
AUX Technologies
[www.aux-tech.net]

On Mon, 5 Feb 2001, adeon wrote:

> Hello ,
>
>   I've wondered (I'm beginner) on how to make a buffer overflow
>   exploit. So, let's say that i've got suid program (compiled) and owned
>   by root:
>
>   //----- cut here
>   #include <stdio.h>
>
>   char buff[2];
>
>   int main()
>   {
>         printf("Enter some letters:");
>         scanf("%s",buff);
>         return 0;
>   }
>   //---- cut here
>
>   Can anyone explain me how to make an exploit for it? Can anyone give
>   some example of exploits?
>
>
> --
> Best regards,
>  adeon                          mailto:adeon () dino open net pl