Bugtraq mailing list archives

Re: CPSR #8: identd Denial of Service

From: cjs () PORTAL CA (Curt Sampson)
Date: Mon, 4 Aug 1997 11:19:41 -0700


Two notes regarding this:

1. I can't get the exploit to work under NetBSD-current or NetBSD-1.2.
It makes hundreds of connections, but I still have only one identd
running, and it's not spinning.

2. A few years back, when NetBSD's identd had a bug in it that
would cause it to spin all on its own, I didn't even notice a half
a dozen of these running on a 486. When I saw them in a ps or saw
the load aerage go up to 6 I'd go and kill them, so I never tested
how many I needed to run to even start to notice any performance
degradation. But it was a lot more than 3.

cjs

Current thread:

Re: Small problem in AIX write command: Executes shell David Hedley (Aug 01)
- <Possible follow-ups>
- Small problem in AIX write command: Executes shell DI. Dr. Klaus Kusche (Aug 01)
  - Re: Small problem in AIX write command: Executes shell David Holland (Aug 01)
    - comp.sys.sgi.bugs: YET another security alert (sigh) Arthur Hagen (Aug 04)
    - comp.sys.sgi.bugs: Re: YET another security alert (sigh) Forwarded by Kari Hurtta (Aug 05)
    - CPSR #8: identd Denial of Service Corinne Posse Releases (Aug 04)
    - Re: CPSR #8: identd Denial of Service Curt Sampson (Aug 04)
  - INND causes cancer in laboratory rats (fwd) Dan Fleisher (Aug 01)
    - Re: INND causes cancer in laboratory rats (fwd) thoth () PURPLEFROG COM (Aug 01)
    - Bugs in Debian Linux's ircd package Matt (Aug 01)
    - SSH LocalForward Kristof Van Damme (Aug 02)
    - Security hole in rusers client David Holland (Aug 02)
    - SSH LocalForward Nicolas Dubee (Aug 02)
    - Re: your mail Erik Troan (Aug 10)
    - Sun Security Bulletin #00149 Aleph One (Aug 13)
    - Sun Security Bulletin #00150 Aleph One (Aug 13)
    - Possible fixed identd Phillip R. Jaenke (Aug 13)

(Thread continues...)