On 7/31/06, Jack C list-recv-at-crepinc.com wrote:

> To see if I still knew how to code simple buffer overflows after a long
> absence from it, I threw together a quick vulnerable C program today and
> wrote and exploit for it. The whole process went great, until I went to
> find the return address I wanted in the stack.

Check out the below thread. You're hitting the same "stack coloring"
introduced in Red Hat 9.0 that I hit when I did the same thing. ;-)

http://www.securityfocus.com/archive/82/381158

-- Steve

[ reply ]