Bugtraq mailing list archives

Re: Novell Pandora Hack - Filling the SYS Volume


From: Samuel_A._Morris () NOTES UP COM (Sam Morris)
Date: Tue, 13 Apr 1999 13:38:27 -0600


You can put a limit on the maximum size of the error log file (SYS$LOG.ERR)
though..... This will stop it from filling the volume.

Sam




Of course spoofing the source of a Pandora attack can have other effects
with these security measures in place, since you could fill up the SYS
volume (stopping all server processing) with "invalid security signature"
messages. There is no "last message repeated 200,000 times" log entry in
Netware....



Current thread: