From owner-freebsd-bugs  Thu Aug 15 14: 0:12 2002
Delivered-To: freebsd-bugs@hub.freebsd.org
Received: from mx1.FreeBSD.org (mx1.FreeBSD.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP id EE7BF37B40D
	for <freebsd-bugs@hub.freebsd.org>; Thu, 15 Aug 2002 14:00:04 -0700 (PDT)
Received: from freefall.freebsd.org (freefall.FreeBSD.org [216.136.204.21])
	by mx1.FreeBSD.org (Postfix) with ESMTP id A9BBA43E42
	for <freebsd-bugs@hub.freebsd.org>; Thu, 15 Aug 2002 14:00:04 -0700 (PDT)
	(envelope-from gnats@FreeBSD.org)
Received: from freefall.freebsd.org (gnats@localhost [127.0.0.1])
	by freefall.freebsd.org (8.12.4/8.12.4) with ESMTP id g7FL04JU011289
	for <freebsd-bugs@freefall.freebsd.org>; Thu, 15 Aug 2002 14:00:04 -0700 (PDT)
	(envelope-from gnats@freefall.freebsd.org)
Received: (from gnats@localhost)
	by freefall.freebsd.org (8.12.4/8.12.4/Submit) id g7FL04jL011288;
	Thu, 15 Aug 2002 14:00:04 -0700 (PDT)
Date: Thu, 15 Aug 2002 14:00:04 -0700 (PDT)
Message-Id: <200208152100.g7FL04jL011288@freefall.freebsd.org>
To: freebsd-bugs@FreeBSD.org
Cc: 
From: serkoon <serkoon@thedarkside.nl>
Subject: kern/41552: TCP timers' sysctl's overflow
Reply-To: serkoon <serkoon@thedarkside.nl>
Sender: owner-freebsd-bugs@FreeBSD.ORG
Precedence: bulk
List-ID: <freebsd-bugs.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo@FreeBSD.ORG?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo@FreeBSD.ORG?subject=subscribe%20freebsd-bugs>
List-Unsubscribe: <mailto:majordomo@FreeBSD.ORG?subject=unsubscribe%20freebsd-bugs>
X-Loop: FreeBSD.org

The following reply was made to PR kern/41552; it has been noted by GNATS.

From: serkoon <serkoon@thedarkside.nl>
To: freebsd-gnats-submit@FreeBSD.org, g.p.de.boer@st.hanze.nl
Cc:  
Subject: kern/41552: TCP timers' sysctl's overflow
Date: Thu, 15 Aug 2002 22:53:18 +0200

  >Note, I don't think the fix referenced in this PR should be merged
  >into the security branches anyway, since it is not security related.
 
 Imo a bug which makes a host vulnerable to a DoS-attack by using up
 all available sockets/filedescriptors -is- a security-bug. I guess you'll
 agree on that.
 
 Then, why don't you feel that way in this particular ocassion? Is it that
 there just aren't many people around with HZ set at 1000 or up, so this
 bug, although it may be a security-bug, isn't that important because
 there are many higher prioritized things to fix?
 
 Pieter
 

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-bugs" in the body of the message