Vulnerability Development mailing list archives

Re: "Moving" Stack: my poor return address!


From: "Steve Bonds" <kzzvt3302 () sneakemail com>
Date: Tue, 1 Aug 2006 16:51:41 -0700

On 7/31/06, Jack C list-recv-at-crepinc.com wrote:

To see if I still knew how to code simple buffer overflows after a long
absence from it, I threw together a quick vulnerable C program today and
wrote and exploit for it. The whole process went great, until I went to
find the return address I wanted in the stack.

Check out the below thread.  You're hitting the same "stack coloring"
introduced in Red Hat 9.0 that I hit when I did the same thing.  ;-)

http://www.securityfocus.com/archive/82/381158

 -- Steve


Current thread: