Vulnerability Development mailing list archives

Is GOT exploitable in solaris?


From: Minchu Mo <morris_minchu () iwon com>
Date: 25 Dec 2001 03:06:57 -0000



The entry of Global Offset Table in linux is pointer to 
piece of executable code( say printf), so overwrite the 
pointer will force the process run your shellcode or 
whatever..

Maybe a mistake/illusion after too much beer,  I found 
the Solaris implmentation of GOT entry is actually not 
pointer, but starting point of 3 instructions which 
finally jump to say, printf executable code. So 
overwrite the entry with your shell code address 
simply corrupt these instruction but not control the 
process.

Has anybody succesfully exploit GOT entry in solaris?

Or another way of asking; Is GOT/PLT implemented 
differently in linux/solaris?


Current thread: