Re: 11 years of inetd default insecurity?
From: Darren Pilgrim (dmp_at_bitfreak.org)
Date: 09/09/03
- Previous message: omere_at_hushmail.com: "Re: XSS vulnerability in phpBB (an other ;-)"
- In reply to: 3APA3A: "11 years of inetd default insecurity?"
- Next in thread: bjornar.bjorgum.larsen_at_ementor.no: "RE: 11 years of inetd default insecurity?"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Date: Tue, 9 Sep 2003 10:17:12 -0700 To: 3APA3A <3APA3A@SECURITY.NNOV.RU>
On 2003.09.06 18:08:22 +0400, 3APA3A <3APA3A@SECURITY.NNOV.RU> wrote:
> II. Who is vulnerable
>
> Any system shipped with network daemons launched through inetd
> (FreeBSD, SuSE, Red Hat, etc.).
FreeBSD doesn't run anything through inetd by default. You have to
manually edit inetd.conf to enable anything, and there is a warning
screen during the install process about doing so.
Additionally, FreeBSD's stock inetd has the following options:
-c maximum
Specify the default maximum number of simultaneous
invocations of each service; the default is unlimited.
May be overridden on a per-service basis with the
"max-child" parameter.
-C rate
Specify the default maximum number of times a service can
be invoked from a single IP address in one minute; the
default is unlimited. May be overridden on a per-service
basis with the "max-connections-per-ip-per-minute"
parameter.
-R rate
Specify the maximum number of times a service can be
invoked in one minute; the default is 256. A rate of 0
allows an unlimited number of invocations.
-s maximum
Specify the default maximum number of simultaneous
invocations of each service from a single IP address; the
default is unlimited. May be overridden on a per-service
basis with the "max-child-per-ip" parameter.
- Previous message: omere_at_hushmail.com: "Re: XSS vulnerability in phpBB (an other ;-)"
- In reply to: 3APA3A: "11 years of inetd default insecurity?"
- Next in thread: bjornar.bjorgum.larsen_at_ementor.no: "RE: 11 years of inetd default insecurity?"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Relevant Pages
|
