Re: Local DoS in FreeBSD

[rabbi () QUICKIE NET (L. Sassaman)]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On Wed, 1 Sep 1999, Darren Reed wrote:

> In some mail from L. Sassaman, sie said:
> > -----BEGIN PGP SIGNED MESSAGE-----
> > Hash: SHA1
> >
> > This was first posted to the FreeBSD security list on the 9th of August,
> > subsequently discussed on freebsd-stable and freebsd-hackers... no one
> > seems to care, even though it is able to lock up 2.2.6, 2.2.8, and 3.2.x
> > machines consistantly. I have also been told that it affects NetBSD and
> > OpenBSD, though I haven't confirmed it.
> >
> > Someone with the know-how care to fix?
>
> Fixing this has been discussed internally, I imagine, by many of the
> affected OS's.  The problem is a resource stavation issue - in this
> case mbuf's.  Arguably, it shouldn't "lock up", just freeze up anything
> that does networking.
>
> I imagine you could lock up more than just the *BSD's with this program.
>
> Darren

I've tested it on various Linuxes, and they are't suseceptible. One of the
people I had discussed this with previously reported having a mess of
errors with his system after rebooting his server multiple times after he
ran the program.

I couldn't get my BSD boxes to respond to anything at the console when I
tried after running it, but even if it only affected all things
networking-related, that is bad enough.

L. Sassaman

System Administrator                | "Even the most primitive society has
Technology Consultant               |  an innate respect for the insane."
icq.. 10735603                      |
pgp.. finger://ns.quickie.net/rabbi |                    --Mickey Rourke

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v0.9.10 (GNU/Linux)
Comment: OpenPGP Encrypted Email Preferred.

iD8DBQE3zetFPYrxsgmsCmoRAryAAJ9+YPts2N2OjoBGjQxB02gTP4HWSQCfa3ad
vj8TjScHltJZvpCee0o2Ug8=
=vsu6
-----END PGP SIGNATURE-----