On Mon, 8 May 2000, Khimenko Victor wrote:
> On 8 May 2000 yoann@mandrakesoft.com wrote:
> > non executable stack give, as it was said before, a false sence of security;
> >
> And guess who said it ?
>
> > also, the majority of recent exploit work on non exec stack as it is, at least,
> > as easy to write an exploit for non executable as for executable stack.
> >
> Hah. HOW LONG non-executable stack prevented exploits for quite a few
> peoples ? Yes, it's well-known thing now and does not work anymore.
> That's why you do not want such things in mainstream kernel.
>
> > So it will not even work on short term.
> >
> It works fine in short term. Non-executable stack prevented LOTS of
> intrusion attempts. Yes, now this hack timed out and not so usefull
> anymore but it worked. For few YEARS. Not so "short" term I want to say.
The information on how to exploit a non-exec stack on x86 has been around
for years.
-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@vger.rutgers.edu
Please read the FAQ at http://www.tux.org/lkml/
This archive was generated by hypermail 2b29 : Mon May 15 2000 - 21:00:14 EST