T

U

u_cred (credentials of the user ), 560 “561

uname “a Unix command, 289

Unhandled Exception Filter, 178 “184

UnhandledExceptionFilter() function (Windows), 180

Unicode

converting from ASCII to Unicode, 202 “203

decoder, 210 “212

defined, 202

instruction set, 204 “205

internationalization, 202

vulnerabilities, 203 “205

wide characters , 202 “203

Unicode bug in Microsoft IIS, 413

Unicode filters, 201 “202

uninitialized variable usage, 400 “401

Unix Assembly Codes Development for Vulnerabilities Illustration Purposes (LSD-PL), 341

Unix commands and Intrusion Detection Systems (IDSs), 289

Unix shellcode

bindsocket, 288

connectback, 288

encryption, 289 “299

findsocket, 288

Unix tools

Ethereal, 339

fstat , 339

ltrace, 339

strace, 339

tcpdump, 339

Unix versions, 501

upload and run, 486

use after free vulnerabilities, 401 “402

user input (length checks), 395

Using Environment for Returning into Lib C (article), Lupin Bursztein, 341

"Using Programmer-Written Compiler Extensions to Catch Security Holes" (paper), Dawson Engler, 530

utilities

dcedump , 112

FaultMon, 362

FaultMon utility, 361

fstat, 339

ifids (interface ids), 113

objdump , 39

VulnTrac, 431 “448