Bugtraq mailing list archives

[Suspected Spam][CVE-2008-4042] Postfix Linux-only local denial of service - PoC


From: Albert Sellarès <whats () wekk net>
Date: Tue, 16 Sep 2008 22:20:15 +0200

Hello,

I have released this PoC for the Linux-only local denial of service
caused by the leak of epoll file descriptors.

This Proof of concept creates a pipe and adds it in postfix's epoll file
descriptor.
When the pipe is added, an endless loop will launch lots of events to
the local and master postfix processes. 
This PoC will slowdown the system a lot.

You can find all the needed files at
http://www.wekk.net/research/CVE-2008-4042/ and
http://www.wekk.net/research/CVE-2008-3889/ and attached with this
email.

Feel free to write me for feedback, corrections, etc.

-- 
  Albert Sellarès        GPG id: 0x13053FFE
  http://www.wekk.net    whats_up () jabber org 
  Linux User: 324456     Catalunya           

Attachment: CVE-2008-4042-exploit.c
Description:

Attachment: signature.asc
Description: Això és una part d'un missatge, signada digitalment


Current thread: