Bugtraq mailing list archives

Re: easy DoS in most RPC apps

From: dleblanc () MINDSPRING COM (David LeBlanc)
Date: Sun, 17 May 1998 11:49:43 -0400


At 02:35 AM 5/15/98 +0200, Peter van Dijk wrote:

Finally, I'm quite sure of this: the bug is in Sun's RPC code.
Investigations show Linux, FreeBSD, SunOS, System V and NeXTstep machines
are affected, which means we've got a _big_ problem here.


If that's the case, then any ports of these utilities running on Windows NT
would also exhibit the same problem - we're all running off of pretty much
the same Sun ONC RPC code.


David LeBlanc
dleblanc () mindspring com

Current thread:

Re: easy DoS in most RPC apps Peter van Dijk (May 10)
- Re: easy DoS in most RPC apps Peter van Dijk (May 12)
  - Re: easy DoS in most RPC apps Bill Trost (May 13)
- <Possible follow-ups>
- Re: easy DoS in most RPC apps Peter van Dijk (May 14)
- Re: easy DoS in most RPC apps David LeBlanc (May 17)
  - Re: easy DoS in most RPC apps Scott Stone (May 17)
    - Re: easy DoS in most RPC apps Bill Paul (May 17)
    - Re: easy DoS in most RPC apps Olaf Kirch (May 18)
    - simple kde exploit fix David Zhao (May 17)
    - Re: simple kde exploit fix Luca Berra (May 18)
    - NFS shell Leendert van Doorn (May 18)
    - Re: NFS shell Oliver Friedrichs (May 19)
    - Re: NFS shell Leendert van Doorn (May 19)
    - Re: simple kde exploit fix Andreas Jellinghaus (May 18)
    - DHCP 1.0 and 2.0 SECURITY ALERT! (fwd) Chris Evans (May 18)