full-disclosure - Re: Symlink vulnerabilities

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <17569.1319585388@turing-police.cc.vt.edu>
Date: Tue, 25 Oct 2011 19:29:48 -0400
From: Valdis.Kletnieks@...edu
To: secn3t@...il.com
Cc: full-disclosure@...ts.grok.org.uk, Tavis Ormandy <taviso@...xchg8b.com>
Subject: Re: Symlink vulnerabilities

On Wed, 26 Oct 2011 09:56:24 +1100, xD 0x41 said:

> You can make it bypass Aslr ?

Nope. It can't, because ASLR doesn't enter into the picture. But then, *who
cares*?  Are you going to make it make it through a passport check too? Because
that's as relevant to this exploit as ASLR is.

> It still must bypass atleast ASLR on vanilla to be called a real poc,and be

No. It has to pwn the target.  If it does so without bothering to do anything that
requires ASLR bypass doesn't matter.

Or are you also going to insist that anybody breaking into your house has to do
so by picking the big shiny lock on the front door that says ASLR, and they're
not allowed to use a window, or an air conditioning vent, or a skylight, or
that old coal chute leading into the basement, or mail you a package that opens
itself inside the house to reveal a robot that opens the front door from the
inside, or social engineering you to demonstrate the awesomeness of the lock,
and sneaking in while the door is open, or....

tl;dr: "Bypass ASLR" isn't the metric for an exploit. pwnage is.

Content of type "application/pgp-signature" skipped

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/