Question 16
In the unsafe unlink attack, we have the following figure of concept:
P
P->bk->fd
P->bk
P->fd
P->fd->bk
P->fd->bk = P->bk
P->bk->fd = P->fd
In order to perform the unsafe unlink attack:
(1)
The attacker must use buffer overflow to corrupt P->bk.
True
(2)
If P->bk can be overwritten, it is enough to achieve arbitrary write to arbitrary
places attack primitive.
True
(3)
If P->fd can be overwritten, it is enough to achieve arbitrary write to arbitrary
places attack primitive.
True
(4)
If P->bk can be overwritten with arbitrary value, it is enough to achieve
arbitrary write to arbitrary places attack primitive.
True
4 pts