A simple compiler technique used by programmers is to add a terminator 'canary word' containing four letters NULL (0x00), CR (0x0d), LF (0x0a) and EOF (0xff) so that most string operations are terminated. If the canary word has been altered when the function returns, and the program responds by emitting an intruder alert into syslog, and then halts what does it indicate?

Question

Accepted Answer

A. A buffer overflow attack has been attempted

Answer

B. A buffer overflow attack has already occurred

Answer

C. A firewall has been breached and this is logged

Answer

D. An intrusion detection system has been triggered

Answer

E. The system has crashed

A simple compiler technique used by programmers is to add a terminator 'canary word' containing four letters NULL (0x00), CR (0x0d), LF (0x0a) and EOF (0xff) so that most string operations are…

Question

Options

How the community answered

Community Discussion