Is there any Buffer overflow attack mechanism that can break a vulnerable server without breaking the ongoing connection?

From: Xin Zhao
Date: Mon Dec 26 2005 - 15:48:43 EST


We are working on a mechanism that monitors the connections of a
server and detects potential intrusions via broken connection
(incoming request received, but no reply). We want to thoroughly
understand the possibility of mounting a buffer overflow attack
against a server process without cutting off the connection.

Any insight on this?

Thanks in advance!

Xin
-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at http://vger.kernel.org/majordomo-info.html
Please read the FAQ at http://www.tux.org/lkml/