FormatGuard: Automatic Protection From printf Format String Vulnerabilities (2001) [93 citations — 3 self]
Download:
http://www.usenix.org/events/sec01/full_papers/cow
http://immunix.org/~crispin/formatguard.pdf
CACHED:
http://www.usenix.org/events/sec01/full_papers/cow
http://immunix.org/~crispin/formatguard.pdf
CACHED:
by
Crispin Cowan
,
Matt Barringer
,
Steve Beattie
,
Greg Kroah-hartman
,
Mike Frantzen
,
Jamie Lokier
Add To MetaCart
Popular Tags
No tags have been applied to this document.
BibTeX | Add To MetaCart
@MISC{Cowan01formatguard:automatic,
author = {Crispin Cowan and Matt Barringer and Steve Beattie and Greg Kroah-hartman and Mike Frantzen and Jamie Lokier},
title = {FormatGuard: Automatic Protection From printf Format String Vulnerabilities},
year = {2001}
}
author = {Crispin Cowan and Matt Barringer and Steve Beattie and Greg Kroah-hartman and Mike Frantzen and Jamie Lokier},
title = {FormatGuard: Automatic Protection From printf Format String Vulnerabilities},
year = {2001}
}
Bookmarks
OpenURL
Abstract:
format bugs" was discovered when an vulnerability in WU-FTP appeared that acted almost like a buffer overflow, but wasn't. Since then, dozens of format string vulnerabilities have appeared. This paper describes the format bug problem, and presents FormatGuard: our proposed solution. FormatGuard is a small patch to glibc that provides general protection against format bugs. We show that FormatGuard is effective in protecting several real programs with format vulnerabilities against live exploits, and we show that FormatGuard imposes minimal compatibility and performance costs.
