Skip site navigation (1)Skip section navigation (2)
Date:      Mon, 17 Aug 1998 21:10:52 +1200 (NZST)
From:      Andrew McNaughton <andrew@squiz.co.nz>
To:        Michael Richards <026809r@dragon.acadiau.ca>
Cc:        security@FreeBSD.ORG
Subject:   Re: Why don't winblows program have buffer overruns?
Message-ID:  <Pine.BSF.3.96.980817210429.344B-100000@aniwa.sky>
In-Reply-To: <199808162301.UAA09103@dragon.acadiau.ca>

next in thread | previous in thread | raw e-mail | index | archive | help
On Sun, 16 Aug 1998, Michael Richards wrote:

> Why aren't there buffer overruns for winblows that overrun the stack and
> execute nasty code? I realise that there is no way to get a shell, but being
> able to exec "format" is still a useful thing for a cracker to do on a
> windows box.

Thinking a bit more about this, I suppose it says something about hackers
being motivated more by kudos than profit.  While there isn't much
publicity to be had in hitting someone's desktop machine, those machines
probably account for most storage of sensitive data.

Andrew


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe security" in the body of the message



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?Pine.BSF.3.96.980817210429.344B-100000>