Final Event Style Sample Challenge - CADET_00003


Original Versions

Known Vulnerabilities

  • CWE-121 - Stack-based Buffer Overflow

Author Information

CGC Summer Intern 2014

DARPA performer group

West Point Military Academy Cadet (CADET)

Description

This is an unusually simple service written by a military cadet as his first ever C program. It is intended as a data point as an incredibly simple service, with an incredibly simple vulnerability, written by an inexperienced programmer.

The underlying service itself is a palindrome detector.

Feature List

  • Simple test service
  • Small code size

Vulnerability

The palindrome vulnerability is a vanilla buffer overflow on the stack. The program allocates 64 bytes of stack space for network input and reads up to 128 bytes at a time.

Generic class of vulnerability

Stack based buffer overflow

CWE classification

CWE-121: Stack-based Buffer Overflow

Challenges

The only intended challenge posed by this service is that it was written by an inexperienced C programmer and consequently it may look different than other test cases.


Curated by Lunge Technology, LLC. Questions or comments? Send us email