Re: setting access rights to priviledged ports

David Lang (dlang@diginsite.com)
Wed, 21 Oct 1998 10:55:14 -0700 (PDT)


-----BEGIN PGP SIGNED MESSAGE-----

does sendmail actually close the socket? I thought it maintained control
of the socket and just closed each connection as it was opened.

David Lang

On Wed, 21 Oct 1998, Ion Badulescu wrote:

> Date: Wed, 21 Oct 1998 02:46:22 -0400
> From: Ion Badulescu <ionut@moisil.cs.columbia.edu>
> To: linux-kernel@vger.rutgers.edu
> Subject: Re: setting access rights to priviledged ports
>
> On Tue, 20 Oct 1998 02:53:02 -0400, Anthony Barbachan wrote:
>
> > From: Olaf Titz <olaf@bigred.inka.de>
> >>(Btw. for any services started from inetd there is a trivial way to
> >>shut them down.)
> >>
> >
> > Is this trivial way doable by a normal user? If so then this is a serious
> > security bug.
>
> It's an even more serious DoS problem otherwise.
>
> And btw even sendmail can be convinced to shut down, quite trivially --
> just cause the load to go over the limit set in sendmail.cf and sendmail
> will close its socket. Then you are free to bind to it if the port is over
> 1023.
>
>
> Ion
>
> --
> It is better to keep your mouth shut and be thought a fool,
> than to open it and remove all doubt.
>
> -
> To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
> the body of a message to majordomo@vger.rutgers.edu
> Please read the FAQ at http://www.tux.org/lkml/
>

-----BEGIN PGP SIGNATURE-----
Version: PGP for Personal Privacy 5.0
Charset: noconv

iQEVAwUBNi4gBD7msCGEppcbAQHAfAgAm5uBL+as9ycrBsW7XhDp5x7kK7Inz+Sq
C7jmGyIWErEPjSBt2gt4ppKUJolm2PCKWgMv5nbpXZrYC6jUEdT/nxvyzn6thQtB
9l7DPud+eI+CmLGybx/c1tDGFCn602TKPHXDNOaRoDOSgrizAs5IaAEt3M5ohwuu
lpdPCpwp3O7g3ehOsJBXbL6xuLE/HoJw8mdQ6P4f5KOhtEDXOVmHEFHCOX2EJ1XH
4lGxmZg6MNVPAyGBjJkIBg7pg4j5plLILwwvKJRX7q3TB75++NudKh3DhHx7Nyvh
MUNIZ49H+nCa0NGyAQAzd0b+CygrbLN7BPfeVA2lTRz2KvDciabpxg==
=w55E
-----END PGP SIGNATURE-----

-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@vger.rutgers.edu
Please read the FAQ at http://www.tux.org/lkml/