GICSP: Global Industrial Cyber Security Professional CertificationDemo

Question

An attacker creates a program that inputs a very large number of characters into a website’s password field, followed by a command. The website grants him administrative access even though he did not provide a valid username or password.

What is this attack called?

A Man-in-the-Middle
B Buffer overflow
C Cross-site scripting
D Fuzzing

Explanation

A buffer overflow occurs when input exceeds a program’s allocated memory buffer, potentially overwriting adjacent memory or control data. An attacker can use the overflow to execute a supplied command or bypass normal authentication, resulting in administrative access without valid credentials.

GICSP: Global Industrial Cyber Security Professional CertificationDemo

AstroTutor

Notes

Readiness

QuestionQ3

Community Discussion