Re: Getting passwords from the heap?

From: H D Moore (hdmat_private)
Date: Tue Jun 26 2001 - 08:10:56 PDT

  • Next message: KF: "m4 and format strings"

    I played with this a while back but couldnt find any other memory but my own. 
     What OS/kernel?  Theoretically the actual Pages should be zero'd out before 
    another user can use them...
    
    On Monday 25 June 2001 03:21 pm, Jason Spence wrote:
    > Hi -
    >
    > I was trying to explain to someone why it's important to do a
    > memset(3) on newly allocated memory by firing up gdb and doing
    > hexdumps of raw uninitialized memory, when I noticed there was what
    > looked like privileged information in the hexdump!
    >
    > I don't know very much about the specifics of how malloc works, but is
    > this a valid method of trying to get privileged information from an
    > unprivilieged account?  For example, does memory that root allocates
    > then deallocates become available to user processes via malloc(3)?
    >
    > I'm going to research this some more and put together a report with
    > the feedback I get if it turns out that this is a valid method of
    > attacking a system from a non-root account.
    



    This archive was generated by hypermail 2b30 : Tue Jun 26 2001 - 23:35:43 PDT