SSCP · Question #1135
__________ attacks capitalize on programming errors and can allow the originator to gain additional privileges on a machine.
The correct answer is B. Buffer Overflow. Buffer overflow attacks capitalize on programming errors where data exceeds an allocated memory buffer, potentially leading to arbitrary code execution and privilege escalation.
Question
__________ attacks capitalize on programming errors and can allow the originator to gain additional privileges on a machine.
Options
- ASYN Flood
- BBuffer Overflow
- CDenial of Service
- DCoordinated
- EDistributed Denial of Service
How the community answered
(29 responses)- B97% (28)
- C3% (1)
Why each option
Buffer overflow attacks capitalize on programming errors where data exceeds an allocated memory buffer, potentially leading to arbitrary code execution and privilege escalation.
A SYN flood is a type of Denial of Service (DoS) attack that overwhelms a target system by initiating numerous TCP connections without completing the handshake, not typically used for privilege escalation via programming errors.
A buffer overflow attack exploits a programming flaw where a program attempts to write data beyond the allocated buffer capacity, overwriting adjacent memory locations. This can lead to system crashes, arbitrary code execution, and potentially privilege escalation if the injected code grants the attacker higher permissions on the target machine.
Denial of Service (DoS) attacks aim to make a service unavailable to legitimate users by overwhelming it, not to gain additional privileges by exploiting programming errors.
Coordinated attacks refer to multiple attackers or attack vectors used together but do not describe a specific type of attack that exploits programming errors for privilege escalation.
Distributed Denial of Service (DDoS) is an enhanced DoS attack using multiple sources to flood a target, and like DoS, its goal is unavailability, not privilege escalation through programming flaws.
Concept tested: Buffer overflow attack mechanism
Source: https://learn.microsoft.com/en-us/security/engineering/bug-bar/buffer-overflow
Topics
Community Discussion
No community discussion yet for this question.