BugTraq
WU-FTPD 2.6.2 Freezer Oct 31 2003 02:55PM
Angelo Rosiello (angelo rosiello katamail com) (1 replies)
Re: WU-FTPD 2.6.2 Freezer Oct 31 2003 07:40PM
Seth Arnold (sarnold wirex com) (1 replies)
On Fri, Oct 31, 2003 at 02:55:43PM -0000, Angelo Rosiello wrote:
> for( i=0; i<loop; i++ )
> {
> write( sd, "LIST -w 1000000 -C\n", 19 );
> }

It is probably worth pointing out that it is FSF ls(1) at fault here;
wu-ftpd just provides a convenient way for potentially unauthenticated
users to DoS the machine. If your OS supports rlimits (ulimit(3)), I
believe they will provide reliable protection against this problem.

--
http://www.immunix.com/ secure Linux distributions and appliances

[ reply ]
Re: WU-FTPD 2.6.2 Freezer Nov 01 2003 02:47PM
Luca Berra (bluca comedia it)


 

Privacy Statement
Copyright 2010, SecurityFocus