Comment by nurettin
Yes but how? After the overflow they still have to know the address of the next call site and the server would be in a UB state.
Yes but how? After the overflow they still have to know the address of the next call site and the server would be in a UB state.
I mean tha hacker won't know what software is running on the server, unless the server announces itself which can be traced to the repo, but then, why ?? Who cares about this guy's vps? This whole thread makes no sense to me and I'm the only one questioning.
UB state doesn’t mean totally uncontrollable or opaque.
There are lots of ways the server could leak information about its internal state, and exploits have absolutely been implemented in the past based only on what was visible remotely.