Following is a simple password checker program. What is wrong with the following code? (i.e., What vulnerability exists in the code?). Explain how the exploit will work and what kind of inputs will allow the attacker to bypass the password check and gain root privileges.

#include

#include

int main(void)

{

char buff[15];

int pass = 0;

printf(" Enter the password : ");

gets(buff);

if(strcmp(buff, "uabblazersrock"))

{

printf (" Wrong Password ");

}

else

{

printf (" Correct Password ");

pass = 1;

}

if(pass)

{

/* Now Give root or admin rights to user*/

printf (" Root privileges given to the user ");

}

return 0;

}