Login Register






The stories and information posted here are artistic works of fiction and falsehood. Only a fool would take anything posted here as fact.
Thread Rating:
  • 0 Vote(s) - 0 Average


What are some low level vulns? filter_list
Author
Message
What are some low level vulns? #1
Buffer overflow
Stack Overflow
Format String Exploits
Heap Overflows

Surely there has to be more than just these, but I can never seem to find them?
Unleash the lead from my pistol into my head bumpin' crystal

Reply

RE: What are some low level vulns? #2
gentoo-based ROP using kernel time signatures.
[Image: 383dbcbdd0eb954803ad9bc4f8934f82.png]

Reply

RE: What are some low level vulns? #3
(05-07-2014, 10:59 PM)misnar Wrote: gentoo-based ROP using kernel time signatures.

what the actual fuck is that
Unleash the lead from my pistol into my head bumpin' crystal

Reply

RE: What are some low level vulns? #4
Race conditions, improper branching, bad casting, memory leaks....

Reply

RE: What are some low level vulns? #5
the good one is a race hazard
[Image: Z9DvuyJ.png]

Reply

RE: What are some low level vulns? #6
(05-08-2014, 04:30 AM)xornull Wrote: the good one is a race hazard

That's race conditioning is it not?
Unleash the lead from my pistol into my head bumpin' crystal

Reply

RE: What are some low level vulns? #7
Integer overflow - Integer overflow is the result of trying to place into computer memory an integer hat is too large for the integer data type in a given system. I think there was such vulnerability in Adobe Flash before a few mouths(or years not sure).
You may like this page http://phrack.org/issues/60/10.html#article
But in my opinion the most recent vulnerability is wrong programming logic.
For example let's say that you have to check if a number is >= 0 and < 1000000 in C++ you will implement it like this:
Code:
if(number <= 0 || number > 1000000){
Do something
}
But a lot of programmers make this mistake:
Code:
if(number < 0 || number > 1000000){
Do something
}

Now the user can provide 0 as value, and the program may go wrong.

Reply







Users browsing this thread: 1 Guest(s)