Paper: Unicode overflow technique

From: Chris Anley (chrisat_private)
Date: Wed Jan 09 2002 - 08:23:20 PST

Next message: jG gM: "xterm exploit in Unixware 7.0.1"

Previous message: secureat_private: "[CLA-2002:450] Conectiva Linux Security Announcement - proftpd"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

('binary' encoding is not supported, stored as-is) Hi folks, I've just published a (brief) paper discussing unicode overflows on our web site: http://www.ngssoftware.com/research.html It details a technique for writing an exploit with alternate zero bytes. Comments/further discussion welcome. Cheers, -chris.

Next message: jG gM: "xterm exploit in Unixware 7.0.1"
Previous message: secureat_private: "[CLA-2002:450] Conectiva Linux Security Announcement - proftpd"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

This archive was generated by hypermail 2b30 : Wed Jan 09 2002 - 12:46:26 PST