[21704] in bugtraq
Re: Two birds with one worm.
daemon@ATHENA.MIT.EDU (Phil Brutsche)
Fri Jul 20 01:39:13 2001
Date: Thu, 19 Jul 2001 22:24:49 -0500 (CDT)
From: Phil Brutsche <pbrutsch@tux.creighton.edu>
To: Ray DeJean <ray@cs.selu.edu>
Cc: "bugtraq@securityfocus.com" <bugtraq@securityfocus.com>
In-Reply-To: <Pine.LNX.4.33.0107191734230.9477-100000@cs.selu.edu>
Message-ID: <Pine.LNX.4.33.0107192219020.29408-100000@tux.creighton.edu>
MIME-Version: 1.0
Content-Type: TEXT/PLAIN; charset=US-ASCII
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
A long time ago, in a galaxy far, far way, someone said...
> My Linux 2.4.5 netfilter firewall started locking up hard when these
> default.ida requests started this morning. No kernel panic, it just
> locks. I haven't been able to pinpoint exactly what the problem is.
I can't confirm that. I have a number of netfilter firewalls (running
2.4.3 and 2.4.6) that haven't even noticed this worm.
> I have another 2.4.5 machine (with fewer kernel options enabled) that is
> doing fine. If someone has more info w/regard to linux, please post...
First thing to do is upgrade to 2.4.6. 2.4.5 has some memory management
issues, as well as quite a few other bugs that are fixed (at least
somewhat) in 2.4.6.
In other words, I would look elsewhere before blaming this worm for a
Linux crash.
- --
- ----------------------------------------------------------------------
Phil Brutsche pbrutsch@tux.creighton.edu
GPG fingerprint: 9BF9 D84C 37D0 4FA7 1F2D 7E5E FD94 D264 50DE 1CFC
GPG key id: 50DE1CFC
GPG public key: http://tux.creighton.edu/~pbrutsch/gpg-public-key.asc
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.0.6 (GNU/Linux)
Comment: Made with pgp4pine
iD8DBQE7V6SJ/ZTSZFDeHPwRAnAkAJwOETXV2XYaCSY1Bhgm6r5FfdethACdHrxE
boXPL6WlcDigKqJbslzRDX4=
=iuSh
-----END PGP SIGNATURE-----
