Security Incidents mailing list archives

solaris nscd cores


From: "j.e.r.k. ROCKS" <jerkrock () yahoo com>
Date: Fri, 30 Nov 2001 05:43:59 -0800 (PST)

  
  Has anyone else seen core dumps from their Solaris nscd process
recently?  At 11:07 CST yesterday, two different Internet-facing
machines in my network saw their nscd processes dump core.  The file
system filled up in both cases, so I actually didn't get a full core
file.  GDB tells me:

Core was generated by `/usr/sbin/nscd'.
Program terminated with signal 9, Killed.
Cannot access memory at address 0xef7efdec.
#0  0xef7663d8 in ?? ()Cannot access memory at address 0xef7efdec.
(gdb) bt
#0  0xef7663d8 in ?? ()Cannot access memory at address 0xef7efdec.


I am running with patch 109339-01, which fixes a mysterious buffer
overflow bug in nscd (Sun released a proactive advisory back in
November 2000, along with this patch), but this definitely makes me
nervous.  Has anyone else encountered this issue?


__________________________________________________
Do You Yahoo!?
Yahoo! GeoCities - quick and easy web site hosting, just $8.95/month.
http://geocities.yahoo.com/ps/info1

----------------------------------------------------------------------------
This list is provided by the SecurityFocus ARIS analyzer service.
For more information on this free incident handling, management 
and tracking system please see: http://aris.securityfocus.com


Current thread: