Exam 10: Buffer Overflow

There are several generic restrictions on the content of shellcode.

The __________ used a buffer overflow exploit in "fingerd" as one of its attackmechanisms.

An attacker is more interested in transferring control to a location andcode of the attacker's choosing rather than immediately crashing theprogram.

In the classic __________ overflow, the attacker overwrites a buffer located in the local variable area of a stack frame and then overwrites the saved frame pointer and return address.

Even though it is a high-level programming language, Java still suffersfrom buffer overflows because it permits more data to be saved into a buffer than it has space for.

__________ defenses aim to detect and abort attacks in existing programs.

Buffer overflows can be found in a wide variety of programs,processing a range of different input, and with a variety of possibleresponses.

Shellcode is not specific to a particular processor architecture.

_________ is a tool used to automatically identify potentially vulnerable programs.

A buffer overflow error is not likely to lead to eventual programtermination.

A __________ can occur as a result of a programming error when a process attempts to store data beyond the limits of a fixed-size buffer and consequently overwrites adjacent memory locations.

A stack overflow can result in some form of a denial-of-service attackon a system.

The buffer is located __________ .

"Smashing the Stack for Fun and Profit" was a step by step introduction to exploiting stack-based buffer overflow vulnerabilities that was published in Phrack magazine by _________ .

A buffer overflow in MicroSoft Windows 2000/XP Local Security Authority Subsystem Service was exploited by the _________ .

__________ aim to prevent or detect buffer overflows by instrumenting programs when they are compiled.

Gaps, or __________ , are flagged in the MMU as illegal addresses, and any attempt to access them results in the process being aborted.

__________ can prevent buffer overflow attacks, typically of global data, whichattempt to overwrite adjacent regions in the processes address space, such as the global offset table.

_________ is a form of overflow attack.

The buffer overflow type of attack has been known since it was first widely used by the __________ Worm in 1988.