Vulnerability Development mailing list archives

Re: DOS on inetd w/ nmap


From: pete () S3 INTEGRALIS CO UK (Pete Philips)
Date: Wed, 26 Apr 2000 15:25:21 +0100


"Clifford, Shawn A" wrote:

I have nmap version 2.12 (the latest stable version), and 'nmap -h' doesn't
show me those options for -T.  To be fair, I didn't read through the man
page for nmap in any detail before launching my scans.

Timing support (-T) was added to Nmap at 2.3 beta 6. The latest is
2.3 beta 21.

Richard Johnson wrote:

On IRIX, inetd is croaking because it has problems with its built-in support
for small services.  Turning those off (specifically echo, tcpmux) in
inetc.conf was the solution SGI suggested for keeping inetd running on an O2K.
 This is reportedly fixed in IRIX 6.5.2, but I don't have bug ID or patch ID
info.

Alternatively you might consider abandoning inetd altogether and
switching to xinetd. This offers much improved functionality
and a number of nifty security advances such as being able to
bind a service to a particular interface. Check out:

http://synack.net/xinetd

Pete.

 ---------------------------------------------------------------
|   Pete Philips                                           \|/  |
|   Integralis S3 Team                                      O   |
|   E-mail:  pete.philips () integralis co uk                      |
|   Phone:   +44 118 930 6060                                   |
|   PGP Key: http://www.s3.integralis.co.uk/pgp/pete.pgp        |
 ---------------------------------------------------------------


Current thread: