[ANNOUNCE] glibc heap protection patch

To: sectools@xxxxxxxxxxxxxxxxx, bugtraq@xxxxxxxxxxxxxxxxx, focus-ids@xxxxxxxxxxxxxxxxx
Subject: [ANNOUNCE] glibc heap protection patch
From: William Robertson <wkr@xxxxxxxxxxx>
Date: Mon, 1 Dec 2003 11:31:03 -0800
List-help: <mailto:bugtraq-help@securityfocus.com>
List-id: <bugtraq.list-id.securityfocus.com>
List-post: <mailto:bugtraq@securityfocus.com>
List-subscribe: <mailto:bugtraq-subscribe@securityfocus.com>
List-unsubscribe: <mailto:bugtraq-unsubscribe@securityfocus.com>
Mailing-list: contact bugtraq-help@xxxxxxxxxxxxxxxxx; run by ezmlm

Hi all,

I'd just like to announce that we have a heap protection system forglibc available for download. The system detects and prevents all heapoverflow exploits that modify inline control information fromsucceeding against a protected application, can be installedsystem-wide or on a per-process basis using LD_PRELOAD, and istransparent to existing applications.

We would definitely appreciate any feedback and bug reports on thecode. The patch and some additional information is available at:


http://www.cs.ucsb.edu/~wkr/projects/heap_protection/

Enjoy!

--
William Robertson
Reliable Software Group, UC Santa Barbara
http://www.cs.ucsb.edu/~wkr/

Follow-Ups:
- Re: [ANNOUNCE] glibc heap protection patch
  - From: Stefan Esser
- Re: [ANNOUNCE] glibc heap protection patch
  - From: Eugene Tsyrklevich

Prev by Date: Jason Maloney's CGI Guestbook Remote Command Execution Vulnerability.
Next by Date: where to discuss common criteria issues?
Previous by thread: Re: Jason Maloney's CGI Guestbook Remote Command Execution Vulnerability.
Next by thread: Re: [ANNOUNCE] glibc heap protection patch
Index(es):
- Date
- Thread