Re: Unexecutable Stack / Buffer Overflow Exploits...

[Dan Hollis]

On Fri, 31 Dec 1999, Theodore Y. Ts'o wrote:
> This also won't save you if the attacker knews the address of a static
> buffer (which is in the data segment), and can store arbitrary data of
> his/her choosing in that static buffer, and then overwrites the return
> address on the stack to point to the static buffer.  But then again, the
> non-executable stack hack won't save you in this case either.

But what will save us is privileges. So programs which dont need them can
drop ability to spawn arbitrary programs, open raw sockets, /etc/passwd
/etc/shadow etc. Suddenly most of the attacks on named dry up...

-Dan