3 ms·
https://en.wikipedia.org/wiki/Buffer_overflow#History https://en.wikipedia.org/wiki/Buffer_overflow#History confirms The earliest documented hostile exploitati
by homarp 4y ago
https://en.wikipedia.org/wiki/Buffer_overflow#History https://en.wikipedia.org/wiki/Buffer_overflow#History confirms
The earliest documented hostile exploitation of a buffer overflow was in 1988. It was one of several exploits used by the Morris worm to propagate itself over the Internet. The program exploited was a service on Unix called finger.
(source code here https://0x00sec.org/t/examining-the-morris-worm-source-code-malware-series-0x02/685 https://0x00sec.org/t/examining-the-morris-worm-source-code-... )
Later, in 1995, Thomas Lopatic independently rediscovered the buffer overflow and published his findings on the Bugtraq security mailing list.
A year later, in 1996, Elias Levy (also known as Aleph One) published in Phrack magazine the paper "Smashing the Stack for Fun and Profit", a step-by-step introduction to exploiting stack-based buffer overflow vulnerabilities.
And here is "How to write buffer overflow" by Mudge (10/20/95) : https://insecure.org/stf/mudge_buffer_overflow_tutorial.html https://insecure.org/stf/mudge_buffer_overflow_tutorial.html
- e12e 4y agoThanks for linking to Mudge's article - and for providing a time-line. For completeness - Smashing the stack for fun and profit: http://phrack.org/issues/49/14.html#article http://phrack.org/issues/49/14.html#article And in the same issue: a profile on Mudge!: http://phrack.org/issues/49/4.html#article http://phrack.org/issues/49/4.html#article > We discussed for a long time who in the hacking world today best exemplifies everything that is right with hacking today, and we came up with a unanimous conclusion that it was Mudge. And so we were quite happy that our first choice for the first pro-phile that we have done accepted our invitation. He cracked your Apple warez when you couldn't, he wrote buffer overflows before they were cool, he owned your Sendmail (and probably still does), and he still manages to give more back to the community than anyone else around.
- e12e 4y agoHeh: > Past handles: Many old Apple ][ crackers remember me by a different handle. That handle is long put to rest thanks to the government. And just the other day I learned that Steve Wozniak got kicked out of UC Boulder, Colorado for hacking their mainframe. Tried to figure out what it was named - but sadly couldn't find the name. Thought it'd make a good name for my new laptop.