Buffer overflow exploit vulnerability C

[jmwalloh]

Hi everyone, I'm a bit new to c programming but familiar with the buffer overflow concept in general terms. I just wanted someone to take me through a code sample i came over the web disccusing this topic. The URL to this article is:http://www.exploit-db.com/exploits/3154/. Any help will be appreciated. Thank in advance.

[deceptikon]

Sorry, but discussion of hacking is against Daniweb's rules. We can help you at a high level, but anything more detailed that could be used to create an exploit is prohibited.

[sunktugg]

I must admit I do not know the rules by heart, but it seems quite backwards not to be able to discuss this.

Understanding how buffer overflows attacks are implemented is key to understanding how to prevent them.

An understanding of this topic is fundamental for any c programmer wanting to write safe code.

[deceptikon]

Understanding how buffer overflows attacks are implemented is key to understanding how to prevent them.

Hardly. Preventing buffer overflow in code is not dependent on understanding the details of how to exploit such a security hole. There's a difference between "this is buffer overflow, and here is how you avoid it", and "tell me how this buffer overflow exploit works". The former teaches safe coding practices while the latter essentially teaches one how to write exploits.

[sunktugg]

I could not agree less, but to each their own.

Out of curiosity, what is your answer to "this is buffer overflow, and here is how you avoid it"?

[deceptikon]

I could not agree less, but to each their own.

Fair enough. I'd be a hypocrite if I said that there's no value in learning the dark side, but willingly sharing that knowledge to folks with unknown intentions has been deemed too risky for this community.

Out of curiosity, what is your answer to "this is buffer overflow, and here is how you avoid it"?

It's situational. I'll point out the risk in given code and show measures to avoid it with a safer best practice.