Exploiting stack-based buffer overflow using modern-day techniques

Stefan Nicula () and Razvan Daniel Zota ()
Additional contact information
Stefan Nicula: The Bucharest University of Economic Studies, Romania
Razvan Daniel Zota: The Bucharest University of Economic Studies, Romania

Database Systems Journal, 2020, vol. 11, issue 1, 99-108

Abstract: This article describes the exploitation of stack-based buffer overflow using modern-day techniques. The buffer overflow vulnerability can affect a binary executable when a program overruns the buffer's boundary while writing data to a buffer and overwrites adjacent memory locations. Due to multiple protection mechanisms enforced by the operating systems, buffer overflow has become harder to exploit. The article reviews the protection mechanisms such as Data Execution Prevention (DEP) and Address Space Layout Randomization (ASLR) which make it difficult to exploit this vulnerability. However, the article also discusses techniques to bypass these mechanisms such as return-oriented programming, libc attack, and address memory leak. The article concludes that successful exploitation of a buffer overflow vulnerability can lead to obtaining code execution on the affected operating system, which may result in elevated privileges inside the system.

Keywords: stack buffer overflow; return-oriented programming; libc attack; exploiting buffer overflow; stack protection mechanisms; address memory leak (search for similar items in EconPapers)
Date: 2020
References: View complete reference list from CitEc
Citations:

Downloads: (external link)
https://www.dbjournal.ro/archive/31/31_14.pdf (application/pdf)

Related works:
This item may be available elsewhere in EconPapers: Search for items with the same title.

Export reference: BibTeX RIS (EndNote, ProCite, RefMan) HTML/Text

Persistent link: https://EconPapers.repec.org/RePEc:aes:dbjour:v:11:y:2020:i:1:p:99-108

Access Statistics for this article

Database Systems Journal is currently edited by Ion Lungu

More articles in Database Systems Journal from Academy of Economic Studies - Bucharest, Romania Contact information at EDIRC.
Bibliographic data for series maintained by Adela Bara ().