Re: Solaris 2.5.1/2.6 fingerd bug

From: James Garnett (garnettat_private)
Date: Wed Aug 05 1998 - 12:25:21 PDT

Next message: Sergiy Zhuk: "Re: Yahoo Pager auto-update"

Previous message: Mark Wooding: "Re: A way to prevent buffer overflow exploits? (was: "Any user"
Maybe in reply to: Fiji: "Solaris 2.5.1/2.6 fingerd bug"
Next in thread: Casper Dik: "Re: Solaris 2.5.1/2.6 fingerd bug"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

Fiji (jfay) wrote:
> try finger @host@host@host....145 times.... This should run the # of
> processes in excess of 1500 and shoot the system load up to at least 13.5.
>
> You can also do a finger @hosta@hostb where hostb is a machine running
> 2.5.1 or 2.6. Now this has not been confirmed on Solaris (x86). The bug id
> is 4161606 but yet there is no patch available as of today.

Yep, same thing happens for x86 running 2.6.

~james

Next message: Sergiy Zhuk: "Re: Yahoo Pager auto-update"
Previous message: Mark Wooding: "Re: A way to prevent buffer overflow exploits? (was: "Any user"
Maybe in reply to: Fiji: "Solaris 2.5.1/2.6 fingerd bug"
Next in thread: Casper Dik: "Re: Solaris 2.5.1/2.6 fingerd bug"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

This archive was generated by hypermail 2b30 : Fri Apr 13 2001 - 14:11:28 PDT