[Python-Dev] Python 2.6.5

Stephen J. Turnbull stephen at xemacs.org
Wed Feb 10 15:14:55 CET 2010


anatoly techtonik writes:

 > Is it possible to make exploits out of crashers?

Depends on how you define "exploit".  If your definition includes
denial of service, yes, crashing a server application would count.

Privilege escalation is harder to achieve.  The general answer is
"yes", but each case is different, and requires expert analysis.



More information about the Python-Dev mailing list