| lists.openwall.net | lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC | |
|
Open Source and information security mailing list archives
| ||
|
Date: Tue, 25 Oct 2011 19:29:48 -0400
From: Valdis.Kletnieks@...edu
To: secn3t@...il.com
Cc: full-disclosure@...ts.grok.org.uk, Tavis Ormandy <taviso@...xchg8b.com>
Subject: Re: Symlink vulnerabilities
On Wed, 26 Oct 2011 09:56:24 +1100, xD 0x41 said:
> You can make it bypass Aslr ?
Nope. It can't, because ASLR doesn't enter into the picture. But then, *who
cares*? Are you going to make it make it through a passport check too? Because
that's as relevant to this exploit as ASLR is.
> It still must bypass atleast ASLR on vanilla to be called a real poc,and be
No. It has to pwn the target. If it does so without bothering to do anything that
requires ASLR bypass doesn't matter.
Or are you also going to insist that anybody breaking into your house has to do
so by picking the big shiny lock on the front door that says ASLR, and they're
not allowed to use a window, or an air conditioning vent, or a skylight, or
that old coal chute leading into the basement, or mail you a package that opens
itself inside the house to reveal a robot that opens the front door from the
inside, or social engineering you to demonstrate the awesomeness of the lock,
and sneaking in while the door is open, or....
tl;dr: "Bypass ASLR" isn't the metric for an exploit. pwnage is.
Content of type "application/pgp-signature" skipped
_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/
Powered by blists - more mailing lists