Answered step by step
Verified Expert Solution
Question
1 Approved Answer
Following is a simple password checker program. What is wrong with the following code? (i.e., What vulnerability exists in the code?). Explain how the exploit
Following is a simple password checker program. What is wrong with the following code? (i.e., What vulnerability exists in the code?). Explain how the exploit will work and what kind of inputs will allow the attacker to bypass the password check and gain root privileges.
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
#include#include int main(void) { char buff[15]; int pass = 0; printf(" Enter the password : "); gets(buff); if(strcmp(buff, "uabblazersrock")) { printf (" Wrong Password "); } else { printf (" Correct Password "); pass = 1; } if(pass) { /* Now Give root or admin rights to user*/ printf (" Root privileges given to the user "); } return 0; }
Step by Step Solution
There are 3 Steps involved in it
Step: 1
Get Instant Access to Expert-Tailored Solutions
See step-by-step solutions with expert insights and AI powered tools for academic success
Step: 2
Step: 3
Ace Your Homework with AI
Get the answers you need in no time with our AI-driven, step-by-step assistance
Get Started