Full Disclosure mailing list archives
OpenBSD implementation of the libc's RPC (portmap) remote DoS.
From: auto236751 () hushmail com
Date: Thu, 22 Nov 2012 17:30:38 +0100
Hi list, As some of you could recently notice a new OpenBSD 5.2 was released. To celebrate it we provide you with the shiny ~9yearer, which is probably heck of a long time. Another funny thing about this bug is, that it's only OpenBSD's libc specific. But there is no much excitement about it though, as we weren't able to achive RCE and the portmap is disabled by default. Maybe some of you will have more luck with it than we had. The bug is also interesting because of it's nature. Why? Check it by yourself (hint: global variables). As stated in http://www.openbsd.org/cgi-bin/cvsweb/src/lib/libc/rpc/svc_tcp.c#rev1.23, many people tested it and weren't able to spot it. Happy hacking... $ cat >> openbsd_libc_portmap.c
_______________________________________________ Full-Disclosure - We believe in it. Charter: http://lists.grok.org.uk/full-disclosure-charter.html Hosted and sponsored by Secunia - http://secunia.com/
Current thread:
- OpenBSD implementation of the libc's RPC (portmap) remote DoS. auto236751 (Nov 26)