Re: Solaris Ping bug (DoS)

[Jes.Sorensen () CERN CH (Jes Sorensen)]

> > > > > "Adam" == Adam Caldwell <adam () ATL ENI NET> writes:

Adam> I briefly searched the bugtraq archives and didn't see this one,
Adam> so here's a way to reboot a Solaris box, and is exploitable by
Adam> anyone with an account on the system since ping is setuid root.

Adam> ping -sv -i 127.0.0.1 224.0.0.1

Adam> On solaris 2.5, causes the machine to reboot (personal
Adam> experience).  I've had independent reports of it crashing 2.5.1,
Adam> and 2.5 (x86).  It probably works on all versions of Solaris.

For what its worth, this bug is also present in 2.6-beta2, haven't
tested the release version of 2.6 yet.

Jes