[11653] in bugtraq
Re: Local DoS in FreeBSD
daemon@ATHENA.MIT.EDU (L. Sassaman)
Thu Sep 2 16:10:13 1999
Mime-Version: 1.0
Content-Type: TEXT/PLAIN; charset=US-ASCII
Message-Id: <Pine.LNX.4.10.9909012309270.7359-100000@thetis.deor.org>
Date: Wed, 1 Sep 1999 23:13:02 -0400
Reply-To: "L. Sassaman" <rabbi@QUICKIE.NET>
From: "L. Sassaman" <rabbi@QUICKIE.NET>
X-To: Darren Reed <avalon@coombs.anu.edu.au>
To: BUGTRAQ@SECURITYFOCUS.COM
In-Reply-To: <199909010130.LAA10648@cheops.anu.edu.au>
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
On Wed, 1 Sep 1999, Darren Reed wrote:
> In some mail from L. Sassaman, sie said:
> >
> > -----BEGIN PGP SIGNED MESSAGE-----
> > Hash: SHA1
> >
> > This was first posted to the FreeBSD security list on the 9th of August,
> > subsequently discussed on freebsd-stable and freebsd-hackers... no one
> > seems to care, even though it is able to lock up 2.2.6, 2.2.8, and 3.2.x
> > machines consistantly. I have also been told that it affects NetBSD and
> > OpenBSD, though I haven't confirmed it.
> >
> > Someone with the know-how care to fix?
>
> Fixing this has been discussed internally, I imagine, by many of the
> affected OS's. The problem is a resource stavation issue - in this
> case mbuf's. Arguably, it shouldn't "lock up", just freeze up anything
> that does networking.
>
> I imagine you could lock up more than just the *BSD's with this program.
>
> Darren
I've tested it on various Linuxes, and they are't suseceptible. One of the
people I had discussed this with previously reported having a mess of
errors with his system after rebooting his server multiple times after he
ran the program.
I couldn't get my BSD boxes to respond to anything at the console when I
tried after running it, but even if it only affected all things
networking-related, that is bad enough.
L. Sassaman
System Administrator | "Even the most primitive society has
Technology Consultant | an innate respect for the insane."
icq.. 10735603 |
pgp.. finger://ns.quickie.net/rabbi | --Mickey Rourke
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v0.9.10 (GNU/Linux)
Comment: OpenPGP Encrypted Email Preferred.
iD8DBQE3zetFPYrxsgmsCmoRAryAAJ9+YPts2N2OjoBGjQxB02gTP4HWSQCfa3ad
vj8TjScHltJZvpCee0o2Ug8=
=vsu6
-----END PGP SIGNATURE-----
