14: Buffer Overflows

Front 1

T/F: Buffer Overflows
are a result of good programming practice.

Back 1

False

Front 2

What may allow individuals to gain root or admin access?

Back 2

Buffer Overflows

Front 3

What is a buffer overflow attack?

Back 3

A buffer overflow attack is when an attacker tries to store too much information in an undersized receptacle

Front 4

What is common implementation?

Back 4

A common implementation is when a user of the program gives the program more data than the developers of the program allocated to store it

Front 5

What is are Shell Escapes?

Back 5

Shell Escapes
special character in input string causes escape to shell

Front 6

T/F: Denial of service – buffer overflow will not cause the system to crash.

Back 6

FALSE

Front 7

T/F: Since important information needed by the OS to continue running can be located on the stack, by overflowing with enough data you can wipe out this important information.

Back 7

TRUE

Front 8

T/F: You can point to your code if you overwrite just the right amount of information to overflow the stack and rewrite the return address pointer.

Back 8

TRUE

Front 9

T/F: The attacker’s code will run at whatever privileges the software that is exploited is running at

Back 9

TRUE

Front 10

T/F: In most cases, an attacker tries to exploit programs that are running as a privileged account such as root or domain administrator.

Back 10

TRUE

Front 11

What is the rule of thumb for protecting against buffer overflow attacks?

Back 11

Know what is installed on your systems and have the least amount of services running and ports open that are required for the system to operate in a specific environment.”