Bugtraq mailing list archives
Big problem on 2.0.x?
From: eduardo.cruz () TS-G COM (Eduardo Cruz)
Date: Thu, 9 Dec 1999 10:51:45 -0600
Hello ppl. Last week i was playing with my old linux 2.0.36 i486 box, while i was playing with the command ping and trying combinations of commands i found that when u do a ping -s 65468 -R ANYIPADDRESS ( -R record route) the system starts to print on the screen kernel dumps , freezes complitely and after few secconds the system reboots. The major problem with this (if this is a bug, because i dont have time to install differents kernels and test it better) is that command can be run by everyone because you dont need root permissions to make a -R. I tested this on a 2.0.35 and .36 (both slackware), when u try to do this on a 2.2.x the system prints out "message too long". I think the problem is that there is a size-check missed when u reach the maximun packet size and u put the route information, but anyway i am not a guru on kernels. So, now is time for the kernel experts :) --------------------------------------------------------------------------- Eduardo Cruz - eduardo.cruz. () ts-g com Network Administrator Telecomm Solutions Group Tel: +350 74146 Fax: +350 41781 ---------------------------------------------------------------
Current thread:
- Big problem on 2.0.x? Eduardo Cruz (Dec 09)
- Re: Big problem on 2.0.x? Hugo.van.der.Kooij () CAIW NL (Dec 10)
- Re: Big problem on 2.0.x? Mike Ireton (Dec 10)
- <Possible follow-ups>
- Re: Big problem on 2.0.x? Stephen White (Dec 11)
- Privacy hole in Go Express Search Alfred Huger (Dec 13)
- Re: Big problem on 2.0.x? Jason Mills (Dec 13)
- [patch] Re: Big problem on 2.0.x? Andrea Arcangeli (Dec 14)
- Local / Remote D.o.S Attack in War FTP Daemon 1.70 Vulnerability Ussr Labs (Dec 13)
- Re: Local / Remote D.o.S Attack in War FTP Daemon 1.70 Vulnerability Malartre (Dec 14)
- Re: Local / Remote D.o.S Attack in War FTP Daemon 1.70 Vulnerability Ussr Labs (Dec 14)
- Re: Local / Remote D.o.S Attack in War FTP Daemon 1.70 Vulnerability Federico - Comnet S.A. (Dec 15)