Buffer overflow detection software

Sqreater · Jan 14, 2006

BOWall is the solution implementing protection against buffer overflow attacks for windows nt4/w2k/xp/2003. The protection is based on patching system DLLs by two methods.

1) Vulnerable functions monitoring

Patching exported strcpy, wstrcpy, strncpy, wstrncpy, strcat, wcscat, strncat, wstrncat, memcpy, memmove, sprintf, swprintf, scanf, wscanf., gets, getws, fgets, fgetws by adding the code wich checks for local frame base pointer integrity.

2) Preventing execution of dynamic libraries functions from writable memory

Patching exproted DLL functions by adding the code which checks for caller address. If caller address belongs to data or stack then program execution is blocked.

Both methods are implemented to detect buffer overflow or exploit activity, buffer overflow itself is not prevented.
Click to expand...

http://www.securesize.com/BOWall/index.shtml

Anyone tried it?

Ilya Rabinovich · Jan 14, 2006

It is an very old project of the Andrey Kolischak. I really doubt it is still effective tool.

securitynewb · Jan 14, 2006

Ok then can someone let us know what are some good, preferably free, programs that prevent or at least warn of buffer overflows? Thanx.

Franklin · Jan 14, 2006

http://www.sanasecurity.com/products/as/features.php

Ilya Rabinovich · Jan 15, 2006

You could take a look at my DefencePlus (www.softsphere.com).

Log in or Sign up

Buffer overflow detection software

Sqreater Guest

Ilya Rabinovich Developer

securitynewb Guest

Franklin Registered Member

Ilya Rabinovich Developer

Log in or Sign up

Buffer overflow detection software

Sqreater Guest

Ilya Rabinovich Developer

securitynewb Guest

Franklin Registered Member

Ilya Rabinovich Developer

Useful Searches