Paxtest reports vulnerabilities

Discuss usability issues, general maintenance, and general support issues for a grsecurity-enabled system.

Paxtest reports vulnerabilities

Postby cmouse » Wed Oct 06, 2010 4:46 am

I ran paxtest and it says that I am still vulnerable for

Return to function (strcpy) :
Return to function (strcpy, RANDEXEC) :
Return to function (memcpy) : Vulnerable
Return to function (memcpy, RANDEXEC) : Vulnerable

Is there anything I can do to prevent this? Or would this require custom compilation of libc?
cmouse
 
Posts: 98
Joined: Tue Dec 17, 2002 10:58 am

Re: Paxtest reports vulnerabilities

Postby PaX Team » Thu Oct 07, 2010 2:24 pm

cmouse wrote:Is there anything I can do to prevent this?
yes, you could for example search this very forum and find stuff like this http://forums.grsecurity.net/viewtopic.php?f=3&t=2084&p=8616#p8616 ;).
Or would this require custom compilation of libc?
the tested functions are only a simple representation of a much more generic attack metod and changing glibc wouldn't do anything against that.
PaX Team
 
Posts: 2310
Joined: Mon Mar 18, 2002 4:35 pm


Return to grsecurity support