K
kernel debugger (ddb), 554 “555
kernel mode payload creation
chroot breaker, 561
p_cred (credentials of the process), 560 “561
u_cred (credentials of the user ), 560 “561
kernel-level vulnerabilities
buffer overflows, 530
design errors, 538
format string bugs , 530
FreeBSD accept system call, 535 “537
functions, 530
heap overflows, 530
integer overflows, 530
logic errors, 530
OpenBSD exec_ibcs2_coff_prep_zmagic() stack overflow
explanation of, 538 “544
exploit, 549 “574
OpenBSD select() kernel stack buffer overflow, 530 “533
OpenBSD setitimer() kernel memory overwrite, 533 “535
Solaris priocntl() , 537 “538
Solaris vfs_getvfssw()
explanation, 544 “548
exploit, 574 “580
stack overflows, 530
"Using Programmer-Written Compiler Extensions to Catch Security Holes" (paper), 530
kern_sysctl() function (OpenBSD), 558
KiUserExceptionDispatcher() function (Windows), 180
Koziol, Jack, Intrusion Detection with Snort (article), 289
