Morning Overview on MSN

An 18-year-old heap buffer overflow in NGINX gives attackers remote code execution — billions of devices run the affected module

A single rewrite rule, the kind pasted into NGINX configurations thousands of times a day, can hand an unauthenticated attacker full remote code execution on the underlying server. The vulnerability, ...
ZDNet

Blame it on the buffer overflows

It used to be that buffer overflows were just a nagging 40-year-old glitch in the software development process. Today, as illustrated by Code Red, they are the No 1 reason hackers can slice through ...
Linux Journal

Buffer Overflow Attacks and Their Countermeasures

Buffer overflow problems always have been associated with security vulnerabilities. In the past, lots of security breaches have occurred due to buffer overflow. This article attempts to explain what ...
CSOonline

What is a buffer overflow? And how hackers exploit these vulnerabilities

A buffer overflow or overrun is a memory safety issue where a program does not properly check the boundaries of an allocated fixed-length memory buffer and writes more data than it can hold. This ...
Threat Post

Decades On, Buffer Overflows Still the Target

Buffer overflows have been a serious security problem for software developers for several decades now, but the history of exploitation research on this class of flaws is relatively short. Buffer ...
ZDNet

Open-source team fights buffer overflows

The OpenBSD project hopes new changes to its latest release will eliminate "buffer overflows," a software issue that has been plaguing security experts for more than three decades. Theo de Raadt, the ...