Re: DoS bug on Tru64

From: Chris Adams (cmadams@hiwaay.net)
Date: 01/31/02 

Date: Wed, 30 Jan 2002 19:32:08 -0600
From: Chris Adams <cmadams@hiwaay.net>
To: bugtraq@securityfocus.com

Once upon a time, Bob Dog <bobdog@drunk.co.nz> said:
> --- ellipse <elliptic@cipherpunks.com> wrote:
> >> Today we were using nmap to scan our network and when we scanned our
> >> Tru64 machines, telnet and ftp froze and timed out. We could not make
> >> any connections to those ports and existing connections froze. New
> >> connections were denied for about a minute after the scan was finished.
> >> I've checked with Compaq and on Securityfocus and neither place has any
> >> knowledge of this.
> >[...]
> >> nmap -T Polite -O -p 23,139 -oM /tmp/lst 'xxx.xxx.16-44.*'
> >
> >Why does this sound so familiar? Would this not be an issue with inetd?

It wouldn't be with inetd (since the original poster said his existing
connections froze as well).

> Support for 4.0D went away as of about September of '01.
> Does anyone know if this is an issues with 5.1?
> Have no box that I want to test this with.

I tried this against my 5.1A test box and didn't have any problem. 

-- 
Chris Adams <cmadams@hiwaay.net>
Systems and Network Administrator - HiWAAY Internet Services
I don't speak for anybody but myself - that's enough trouble.