Re: setting access rights to priviledged ports

Ion Badulescu (ionut@moisil.cs.columbia.edu)
Wed, 21 Oct 1998 02:46:22 -0400


On Tue, 20 Oct 1998 02:53:02 -0400, Anthony Barbachan wrote:

> From: Olaf Titz <olaf@bigred.inka.de>
>>(Btw. for any services started from inetd there is a trivial way to
>>shut them down.)
>>
>
> Is this trivial way doable by a normal user? If so then this is a serious
> security bug.

It's an even more serious DoS problem otherwise.

And btw even sendmail can be convinced to shut down, quite trivially --
just cause the load to go over the limit set in sendmail.cf and sendmail
will close its socket. Then you are free to bind to it if the port is over
1023.

Ion

-- 
  It is better to keep your mouth shut and be thought a fool,
            than to open it and remove all doubt.

- To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to majordomo@vger.rutgers.edu Please read the FAQ at http://www.tux.org/lkml/