GICSP: Global Industrial Cyber Security Professional Certification

By GIAC · Question Mode

QuestionQ3

Hardening & Protecting Endpoints

An attacker creates a program that inputs a very large number of characters into a website’s password field, followed by a command. The website grants him administrative access even though he did not provide a valid username or password.

What is this attack called?

Explanation

A buffer overflow occurs when input exceeds a program’s allocated memory buffer, potentially overwriting adjacent memory or control data. An attacker can use the overflow to execute a supplied command or bypass normal authentication, resulting in administrative access without valid credentials.

Community Discussion

No comments yet. Be the first to start the discussion!