xfs
[Top] [All Lists]

Re: IRIX XFS filesystem denial of service attack

To: H D Moore <sflist@xxxxxxxxxxxxxxxxxx>
Subject: Re: IRIX XFS filesystem denial of service attack
From: Ron DuFresne <dufresne@xxxxxxxxxxxxx>
Date: Tue, 16 Apr 2002 13:55:35 -0500 (CDT)
Cc: agent99@xxxxxxx, <linux-xfs@xxxxxxxxxxx>, <bugtraq@xxxxxxxxxxxxxxxxx>
In-reply-to: <200204151832.38497.sflist@xxxxxxxxxxxxxxxxxx>
Sender: owner-linux-xfs@xxxxxxxxxxx
Wouldn't ulimit and or rlimits help mitigate this issue on linux systems?

Thanks,

Ron DuFresne

On Mon, 15 Apr 2002, H D Moore wrote:

> Does this vulnerability affect the Linux XFS port? The XFS page has no
> information about this or whether there is a fix available:
>
> http://oss.sgi.com/projects/xfs/
>
> -HD
>
> On Monday 15 April 2002 04:49 pm, SGI Security Coordinator wrote:
> >
> >                           SGI Security Advisory
> >
> >         Title:      IRIX XFS filesystem denial of service attack
> >         Number:     20020402-01-P
> >         Date:       April 15, 2002
> >         Reference:  CAN-2002-0042
> > -----------------------
> > --- Issue Specifics ---
> > -----------------------
> >
> > It has been reported that there is a vulnerability in IRIX's XFS
> > filesystem. Under some circumstances, a user can create a file that would
> > hang any application that would try to access it.  This has the potential
> > to be used to create a Denial of Service attack.
>

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
"Cutting the space budget really restores my faith in humanity.  It
eliminates dreams, goals, and ideals and lets us get straight to the
business of hate, debauchery, and self-annihilation." -- Johnny Hart
        ***testing, only testing, and damn good at it too!***

OK, so you're a Ph.D.  Just don't touch anything.


<Prev in Thread] Current Thread [Next in Thread>