Exam 10: Buffer Overflow

A consequence of a buffer overflow error is __________ .

Buffer overflow exploits are no longer a major source of concern to security practitioners.

The _________ is typically located above the program code and global data and grows up in memory (while the sack grows down toward it).

A buffer overflow error is not likely to lead to eventual program termination.

Stack buffer overflow attacks were first seen in the Aleph One Worm.

The Packet Storm Web site includes a large collection of packaged shellcode,including code that can:

__________ is one of the best known protection mechanisms that is a GCC compiler extension that inserts additional function entry and exit code.

An attacker is more interested in transferring control to a location and code of the attacker's choosing rather than immediately crashing the program.

Shellcode is not specific to a particular processor architecture.

"Smashing the Stack for Fun and Profit" was a step by step introduction to exploiting stack-based buffer overflow vulnerabilities that was published in Phrack magazine by _________ .

_________ is a form of overflow attack.

A buffer _________ is a condition at an interface under which more input can be placed into a buffer or data holding area than the capacity allocated,overwriting other information.

The function of ________ was to transfer control to a user command-line interpreter,which gave access to any program available on the system with the privileges of the attacked program.

To exploit any type of buffer overflow the attacker needs to identify a buffer overflow vulnerability in some program that can be triggered using externally sourced data under the attackers control.

In the classic __________ overflow,the attacker overwrites a buffer located in the local variable area of a stack frame and then overwrites the saved frame pointer and return address.

The __________ project produces a free,multiplatform 4.4BSD-based UNIX-like operating system.

The potential for a buffer overflow exists anywhere that data is copied or merged into a buffer,where at least some of the data are read from outside the program.

A stack buffer overflow is also referred to as ___________ .

Traditionally the function of __________ was to transfer control to a user command-line interpreter,which gave access to any program available on the system with the privileges of the attacked program.

Data is simply an array of _________ .