Messages in this thread | | | Date | Wed, 21 Oct 1998 10:55:14 -0700 (PDT) | From | David Lang <> | Subject | Re: setting access rights to priviledged ports |
| |
-----BEGIN PGP SIGNED MESSAGE-----
does sendmail actually close the socket? I thought it maintained control of the socket and just closed each connection as it was opened.
David Lang
On Wed, 21 Oct 1998, Ion Badulescu wrote:
> Date: Wed, 21 Oct 1998 02:46:22 -0400 > From: Ion Badulescu <ionut@moisil.cs.columbia.edu> > To: linux-kernel@vger.rutgers.edu > Subject: Re: setting access rights to priviledged ports > > On Tue, 20 Oct 1998 02:53:02 -0400, Anthony Barbachan wrote: > > > From: Olaf Titz <olaf@bigred.inka.de> > >>(Btw. for any services started from inetd there is a trivial way to > >>shut them down.) > >> > > > > Is this trivial way doable by a normal user? If so then this is a serious > > security bug. > > It's an even more serious DoS problem otherwise. > > And btw even sendmail can be convinced to shut down, quite trivially -- > just cause the load to go over the limit set in sendmail.cf and sendmail > will close its socket. Then you are free to bind to it if the port is over > 1023. > > > Ion > > -- > It is better to keep your mouth shut and be thought a fool, > than to open it and remove all doubt. > > - > To unsubscribe from this list: send the line "unsubscribe linux-kernel" in > the body of a message to majordomo@vger.rutgers.edu > Please read the FAQ at http://www.tux.org/lkml/ >
-----BEGIN PGP SIGNATURE----- Version: PGP for Personal Privacy 5.0 Charset: noconv
iQEVAwUBNi4gBD7msCGEppcbAQHAfAgAm5uBL+as9ycrBsW7XhDp5x7kK7Inz+Sq C7jmGyIWErEPjSBt2gt4ppKUJolm2PCKWgMv5nbpXZrYC6jUEdT/nxvyzn6thQtB 9l7DPud+eI+CmLGybx/c1tDGFCn602TKPHXDNOaRoDOSgrizAs5IaAEt3M5ohwuu lpdPCpwp3O7g3ehOsJBXbL6xuLE/HoJw8mdQ6P4f5KOhtEDXOVmHEFHCOX2EJ1XH 4lGxmZg6MNVPAyGBjJkIBg7pg4j5plLILwwvKJRX7q3TB75++NudKh3DhHx7Nyvh MUNIZ49H+nCa0NGyAQAzd0b+CygrbLN7BPfeVA2lTRz2KvDciabpxg== =w55E -----END PGP SIGNATURE-----
- To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to majordomo@vger.rutgers.edu Please read the FAQ at http://www.tux.org/lkml/
| |