Choosing A Webhost:
A web hosting service is a type of Internet hosting service that allows individuals and organizations to provide their own website accessible via the World Wide Web. Web hosts are companies that provide space on a server they own for use by their clients as well as providing Internet connectivity, typically in a data center. Web hosts can also provide data center space and connectivity to the Internet for servers they do not own to be located in their data center, called colocation. more...
|
Re: Interesting reading on exec* access checks.: msg#00084
|
Subject: |
Re: Interesting reading on exec* access checks. |
On Tue, 2005-12-13 at 17:03 +0000, Mike Hearn wrote:
> On Mon, 12 Dec 2005 12:27:07 -0500, Stephen Smalley wrote:
> > exec-shield is a mechanism that approximates NX support, but does not
> > define policy, so it cannot differentiate between a legitimate
> > application request for executable memory from the same request induced
> > by malicious code
>
> I thought that in order to get malicious code into a running program with
> any degree of reliability you need to know its VMA layout, and execshield
> prevents that. So how can you do attacks like this with execshield enabled?
http://www.stanford.edu/~blp/papers/asrandom.pdf
--
Stephen Smalley
National Security Agency
|
| |
