3 ms·
It is likely a scala program running, no buffer overflows to be found. In a modern language, you have to be very careless to allow RCE.
by tyho 11y ago
It is likely a scala program running, no buffer overflows to be found. In a modern language, you have to be very careless to allow RCE.
- gohrt 11y agobuffer overflow is not the only way to get a RCE. String manipulation and 'eval' (which gives access to system APIs) is a common culprit
- chc 11y agoIs anything like eval commonly used in Scala? That language is static as all get-out.
- deleted 11y ago[deleted]
- eropple 11y agoI've started seeing (and occasionally using) util-eval as a configuration language for Scala, but it's generally pretty rare.
- Dylan16807 11y agoUsing eval is gratuitous carelessness. At least a buffer overflow can be a mistake.