Exam 10: Buffer Overflow

One of the restrictions on the content of shellcode is that it has to be _______,which means that it cannot contain any absolute address referring to itself.

A stack overflow can result in some form of denial-of-service attack on a system.

______ defenses aim to harden programs to resist attacks in new programs.

A stack buffer overflow attack is also referred to as ______.

In 2004 the ________ exploited a buffer overflow in Microsoft Windows 2000/XP Local Security Authority Subsystem Service.

________ attacks can occur in a binary buffer copy when the programmer has included code to check the number of bytes being transferred,but due to a coding error,allows just one more byte to be copied than there is space available.

The _________ aims to provide useful information to people who perform penetration testing,IDS signature development,and exploit research.

To exploit any type of buffer overflow the attacker needs to understand how that buffer will be stored in the processes memory.

The function of the _______ was to transfer control to a user command line interpreter that gave access to any program available on the system with the privileges of the attacked program.

A ______ is a structure where data are usually saved on the stack.

Buffer overflows can be found in a wide variety of programs.

The attacker is able to precisely specify the starting address of the instructions in the shellcode.

A successful buffer overflow attack results in the loss of the function or service the attacked program provided.

C's designers placed much more emphasis on space efficiency and performance considerations than on type safety.

Several of the items in the CWE/SANS Top 25 Most Dangerous Software Errors list,Risky Resource Management category,are buffer overflow variants.

The buffer overflow type of attack is one of the least commonly seen attacks.

An effective method for protecting programs against classic stack overflow attacks is to instrument the function entry and exit code to setup and then check its sack frame for any evidence of corruption.

The responsibility is placed on the assembly language programmer to ensure that the correct interpretation is placed on any saved data value.

_______ defenses aim to detect and abort attacking existing programs.

At the basic machine level,all of the data manipulated by machine instructions executed by the computer processor are stored in either the processor's registers or in ________.