DoS on anoncvs?

[Michael Richardson <mcr () sandelman ottawa on ca>]

-----BEGIN PGP SIGNED MESSAGE-----


I came home to grab my email, and found:

lox-[/users/mcr] root 15 #ps ax | grep allow-root                     
 1278 ??  RN   1076:29.88 cvs --allow-root=/tcpdump/master -T /tcpdump/tmp pser
 1360 ??  RN   1087:36.53 cvs --allow-root=/tcpdump/master -T /tcpdump/tmp pser
 1371 ??  RN   1092:50.68 cvs --allow-root=/tcpdump/master -T /tcpdump/tmp pser
 1554 ??  RN   1091:15.50 cvs --allow-root=/tcpdump/master -T /tcpdump/tmp pser
 9843 ??  RN     81:38.68 cvs --allow-root=/tcpdump/master -T /tcpdump/tmp pser
 9877 ??  RN    330:19.75 cvs --allow-root=/tcpdump/master -T /tcpdump/tmp pser
 9945 ??  RN    330:11.42 cvs --allow-root=/tcpdump/master -T /tcpdump/tmp pser
10018 ??  RN    327:09.41 cvs --allow-root=/tcpdump/master -T /tcpdump/tmp pser
19761 ??  RN    174:17.30 cvs --allow-root=/tcpdump/master -T /tcpdump/tmp pser
19762 ??  S       0:00.04 cvs --allow-root=/tcpdump/master -T /tcpdump/tmp pser
19785 ??  RN    171:52.32 cvs --allow-root=/tcpdump/master -T /tcpdump/tmp pser
19788 ??  S       0:00.08 cvs --allow-root=/tcpdump/master -T /tcpdump/tmp pser
25001 ??  RN    261:33.48 cvs --allow-root=/tcpdump/master -T /tcpdump/tmp pser
28424 ??  RN     78:55.62 cvs --allow-root=/tcpdump/master -T /tcpdump/tmp pser
28454 ??  SW      0:00.00 cvs --allow-root=/tcpdump/master -T /tcpdump/tmp pser

lox-[/users/mcr] root 20 #uptime
 4:31PM  up 4 days, 14:35, 1 user, load averages: 10.95, 12.38, 12.60

Anyway, I cleaned this up. Things seem okay.

The sockets appear to have gone away. This is CVS 1.11.5.

I'm just mentioning this in case it rings a bell for anyone.

]       ON HUMILITY: to err is human. To moo, bovine.           |  firewalls  [
]   Michael Richardson, Sandelman Software Works, Ottawa, ON    |net architect[
] mcr () sandelman ottawa on ca http://www.sandelman.ottawa.on.ca/ |device driver[
] panic("Just another Debian GNU/Linux using, kernel hacking, security guy"); [
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.0.7 (GNU/Linux)
Comment: Finger me for keys

iQCVAwUBPjXQd4qHRg3pndX9AQEBXgP9GzhPuf0qy5v1plkbkU0gonSx5oLJjZQu
YAVgMBRdwohFPa9EQG3zNE/qEcvDx2lHZXEMfc6L4Pt1tnuMyJzoJF/YJgu7LEOF
tKix3uaKPV2na9xHc/3j2RjKDrHNgzNdoh/GoMj+vZvjYtqPU8J7GwN7bRtuhNu/
XmmACQwuioo=
=8m8L
-----END PGP SIGNATURE-----
-
This is the TCPDUMP workers list. It is archived at
http://www.tcpdump.org/lists/workers/index.html
To unsubscribe use mailto:tcpdump-workers-request () tcpdump org?body=unsubscribe