
Buffer Overflows
Buffer overflows are considered one of the most important security concerns. It is a Common way for hackers to get you.
The temporary cache that each program has is given too much information and it will crash the program. There will be a leftover shell that the hacker will then inject an arbitrary piece of code or use the elevated permission shell to change your system. Some anti-spyware will catch a buffer overflow, but it will often self replicate and come right back after you delete it.
In Unix auditing, look for the finger. It is a way to do the buffer overflow.
|