我最近学习了缓冲区溢出的基础知识，并且使用不安全的缓冲区编写了一些非常简单的 C/C++ 代码，并产生了一些有趣的结果。
现在我的问题是：你能说出一个实际上存在的存在已知缓冲区溢出漏洞的程序吗？如果可能的话，我特别寻找通过网络运行的东西。
我看过教程、阅读文章，甚至观看了讨论/演示 Skills FTP 服务器版本中的缓冲区溢出漏洞的视频。 2.34，但我一生都无法在任何地方在线找到它的单个副本。我可以找到大量无漏洞版本的下载，但没有找到对教育有用的版本。在这方面的任何帮助也将不胜感激。
非常感谢。
I have recently learned the basics of buffer overflows, and I have written a few very simple pieces of C/C++ code with unsafe buffers and have produced some interesting results.
Now my question is this: Can you name a program that's actually out there in the wild that has a known buffer overflow vulnerability? I am especially looking for something that runs over a network, if possible.
I have seen tutorials and read articles and even watched videos that have talked about/demonstrated the buffer overflow vulnerability in the Ability FTP Server ver. 2.34, but I can not for the life of me find a single copy of it online anywhere. I can find plenty of downloads of non-vulnerable versions, but non of the educationally useful ones. Any help on this front would also be appreciated.
Thanks a bunch.
发布评论
评论（3）
有一本很棒的书教授如何利用缓冲区溢出（以及其他漏洞）。本书附带了一个 Linux LiveCD，它很好地设置了编译器/调试器和大量可利用的程序。
如果您还没有购买，强烈推荐：
黑客行为。剥削的艺术
There is a great book which teaches exploiting buffer overflows (amongst other vulnerabilities). Book comes with a Linux LiveCD which is nicely set up with compilers/debuggers and plenty of exploitable programs.
Highly recommended if you haven't already picked it up:
Hacking. The Art of Exploitation
是的，但希望在您成功演示您的攻击之前它会被修复。已知漏洞存在的时间越长，漏洞被修补的可能性就越大（请参阅排队论）。所以，实际上是“野外”部分限制太多。为什么不尝试一些历史漏洞呢？ Perdue 的缓冲区溢出页面是一个很好的起点。他们在 ntdll.dll 中列出了 RPC DCOM，并且 Sendmail 8.11 存在远程缓冲区溢出 错误。此外，telnetd 有一个缓冲区溢出错误，您可以在 FreeBSD 4.3-RELEASE 系统中找到该错误。
Yes, but hopefully it will be patched before you are successfully able to demonstrate your attack. The longer a known vulnerability exists the more likely a the vulnerability will be patched (see queing theory). So, it is really the 'in the wild' part that is too restrictive. Why not try some historical vulnerabilities. The Buffer Overfolw Page at Perdue is a good place to start. They list RPC DCOM in ntdll.dll and Sendmail 8.11 has a Remote Buffer Overflow bug. Additionally telnetd has a buffer overflow bug you can find in FreeBSD 4.3-RELEASE systems.
能力服务器非常适合练习。几年前我写了一篇关于此的研究论文，您可以在这里访问：
http://blog.sat0ri.com/reverse-code-engineering/2009/03/finding-exploiting-and-fixing-bugs-in-binaries/
这很好地介绍了漏洞并以方法漏洞为例。
我希望它有用！
问候，
夏普
The ability server is super to practice on. I wrote a research paper about this some years ago, which you can access here:
http://blog.sat0ri.com/reverse-code-engineering/2009/03/finding-exploiting-and-fixing-bugs-in-binaries/
This give a good introduction to vulnerabilities and uses the method vulnerability as an example.
I hope it is useful!
Regards,
sharpe