Steve,
The problems your having may be due to the VA Kernel patch randomizing
the stack at runtime. Are you running a 2.6.X kernel? You can tell if
the VA Patch is the problem by looking at the output of:
cat /proc/<pid>/maps for two different instances of the program. You'll
notice the stack region is mapped differently for each instance. Now in
order to run your shellcode you have a few different options to bypass
this restriction. For more information
http://www.packetstormsecurity.org/papers/bypass/smackthestack.txt.
Hope that helps,
--David D. Rude II
bannedit@xxxxxxxxxxxxxxx
|