Re: OpenSSH Vulnerability

weigelt_at_metux.de
Date: 09/18/03

  • Next message: Adam: "Re: OpenSSH Vulnerability" 
    Date: Thu, 18 Sep 2003 20:57:06 +0200
To: vuln-dev@securityfocus.com

    On Thu, Sep 18, 2003 at 11:35:21AM -0700, Alexander E. Cuttergo wrote:

    <snip>
    > It would be easier to exploit out-of-memory condition. But it requires
    > additional bug to consume all memory on an attacked host. By default, sshd
    > allows only 10 unauthenticated sessions, so by sshd you can only consume ca
    > 20MBx10=200MB, which is not enough.

    Is it also true when running sshd by inetd (-i) ?

    cu 

    -- 
---------------------------------------------------------------------
 Enrico Weigelt    ==   metux IT services
 phone:     +49 36207 519931         www:       http://www.metux.de/     
 fax:       +49 36207 519932         email:     contact@metux.de
 cellphone: +49 174 7066481	     
---------------------------------------------------------------------
 Diese Mail wurde mit UUCP versandt.      http://www.metux.de/uucp/
  • Next message: Adam: "Re: OpenSSH Vulnerability"

    Relevant Pages