このアラートは、攻撃者が Web フォームのテキスト ボックスに何千もの文字を入力したことを示しています。Web フォームは、正当な顧客が電話番号を入力することを目的としていました。発生した可能性が最も高い攻撃はどれですか?
正解:B
Explanation
A buffer overflow attack occurs when an attacker inputs more data than the buffer can store, causing the excess data to overwrite adjacent memory locations and corrupt or execute code1. In this case, the attacker entered thousands of characters into a text box that was intended for phone numbers, which are much shorter.
This could result in a buffer overflow attack that compromises the web application or server. The other options are not related to this scenario. Privilege escalation is when an attacker gains unauthorized access to higher-level privileges or resources2. Resource exhaustion is when an attacker consumes all the available resources of a system, such as CPU, memory, disk space, etc., to cause a denial of service3. Cross-site scripting is when an attacker injects malicious code into a web page that is executed by the browser of a victim who visits the page.
References: 1: https://www.fortinet.com/resources/cyberglossary/buffer-overflow 2:
https://www.imperva.com/learn/application-security/privilege-escalation/ 3:
https://www.imperva.com/learn/application-security/resource-exhaustion/ :
https://owasp.org/www-community/attacks/xss/