probably, and ideally so, but you have to remember that you are already
dealing with software not behaving because it has allowed a buffer
overflow.  it depends on the hardware and software, some systems are
more robust than others.  i honestly haven't played with *nix for along
time, and never at that low level so i can't say for sure for *nix. 
also, depending on where the buffer is it might just overflow into
memory space used by apache or whatever in which case it may not be able
to do major damage, but it might well be able to diddle with things that
are normally secure.  it's sort of like drawing a high voltage arc to
the keyboard on an electronic door lock, it will usually open the door,
but it depends to some extent on the implementation.

"Eric D." wrote:
> 
> on 16/7/02 14:27, Philip Stortz at [EMAIL PROTECTED] wrote:
> 
> > no, because the area that the buffer overflows into will likely be ram
> > in use by another application or more likely the os.  basically what
> > happens is a bunch of code gets shoved into ram, by the software being
> > overflowed, into an area of ram the software in question likely has no
> > business accessing at all, and when the os or other software that's been
> > corrupted by having it changed in ram happens to branch into that area
> > of memory during "normal" execution the code gets run, just because it's
> > there and the software doesn't know the ram has been corrupted by a
> 
> Isn't this what "protected memory" management is supposed to prevent in
> *NIX?


-- 
Philip Stortz, mad scientist at large. --Every 13 seconds an American
gun owner uses a firearm in defense against a criminal.  gun ownership
deters crime, it doesn't increase it.  gun control increases crime and
cost lives.  <http://www.pulpless.com/gunclock/framedex.html>

-- 
G-List is sponsored by <http://lowendmac.com/> and...

 Small Dog Electronics    http://www.smalldog.com | Refurbished Drives |
 -- We have Apple Refurbished Monitors in stock!  |  & CDRWs on Sale!  |

      Support Low End Mac <http://lowendmac.com/lists/support.html>

G-List list info:       <http://lowendmac.com/lists/g-list.shtml>
Send list messages to:  <mailto:[EMAIL PROTECTED]>
To unsubscribe, email:  <mailto:[EMAIL PROTECTED]>
For digest mode, email: <mailto:[EMAIL PROTECTED]>
Subscription questions: <mailto:[EMAIL PROTECTED]>
Archive: <http://www.mail-archive.com/g-list%40mail.maclaunch.com/>

Using a Macintosh? Get free email and more at Applelinks! 
<http://www.applelinks.com>

Reply via email to