[23039] in bugtraq
Bug in scp v3.0.1
daemon@ATHENA.MIT.EDU (Jonathan A. Zdziarski)
Wed Oct 31 15:22:14 2001
From: "Jonathan A. Zdziarski" <jonathan@cafejesus.com>
To: <bugtraq@securityfocus.com>
Date: Wed, 31 Oct 2001 00:18:47 -0500
Message-ID: <COEPIIFFJPONEJNLHKOEAEDFCGAA.jonathan@cafejesus.com>
MIME-Version: 1.0
Content-Type: text/plain;
charset="iso-8859-1"
Content-Transfer-Encoding: 7bit
I was scp'ing a 2MB file to my home computer over a DSL line and just
happened to run top at the same time. I immediately noticed this line:
13864 root 1 30 0 2884K 1744K run 0:38 42.00% sshd2
It appears that scp'ing a file over a slow connection causes the process to
suck up a huge number of resources. There's most likely no usleep()
somewhere it's needed. A couple scp's over slow connections could severely
degrade the boxes performance.
This test was performed on a Solaris 8_x86 machine.
