Re: Local DoS in FreeBSD

From: L. Sassaman (rabbiat_private)
Date: Wed Sep 01 1999 - 20:13:02 PDT

  • Next message: Peter Wemm: "Re: Debian not vulnerable to recent cron buffer overflow"

    -----BEGIN PGP SIGNED MESSAGE-----
    Hash: SHA1
    
    On Wed, 1 Sep 1999, Darren Reed wrote:
    
    > In some mail from L. Sassaman, sie said:
    > >
    > > -----BEGIN PGP SIGNED MESSAGE-----
    > > Hash: SHA1
    > >
    > > This was first posted to the FreeBSD security list on the 9th of August,
    > > subsequently discussed on freebsd-stable and freebsd-hackers... no one
    > > seems to care, even though it is able to lock up 2.2.6, 2.2.8, and 3.2.x
    > > machines consistantly. I have also been told that it affects NetBSD and
    > > OpenBSD, though I haven't confirmed it.
    > >
    > > Someone with the know-how care to fix?
    >
    > Fixing this has been discussed internally, I imagine, by many of the
    > affected OS's.  The problem is a resource stavation issue - in this
    > case mbuf's.  Arguably, it shouldn't "lock up", just freeze up anything
    > that does networking.
    >
    > I imagine you could lock up more than just the *BSD's with this program.
    >
    > Darren
    
    I've tested it on various Linuxes, and they are't suseceptible. One of the
    people I had discussed this with previously reported having a mess of
    errors with his system after rebooting his server multiple times after he
    ran the program.
    
    I couldn't get my BSD boxes to respond to anything at the console when I
    tried after running it, but even if it only affected all things
    networking-related, that is bad enough.
    
    
    
    
    L. Sassaman
    
    System Administrator                | "Even the most primitive society has
    Technology Consultant               |  an innate respect for the insane."
    icq.. 10735603                      |
    pgp.. finger://ns.quickie.net/rabbi |                    --Mickey Rourke
    
    
    
    
    -----BEGIN PGP SIGNATURE-----
    Version: GnuPG v0.9.10 (GNU/Linux)
    Comment: OpenPGP Encrypted Email Preferred.
    
    iD8DBQE3zetFPYrxsgmsCmoRAryAAJ9+YPts2N2OjoBGjQxB02gTP4HWSQCfa3ad
    vj8TjScHltJZvpCee0o2Ug8=
    =vsu6
    -----END PGP SIGNATURE-----
    



    This archive was generated by hypermail 2b30 : Fri Apr 13 2001 - 15:01:03 PDT