From owner-freebsd-security  Fri Jun  2  6:43:35 2000
Delivered-To: freebsd-security@freebsd.org
Received: from wat-border.sentex.ca (waterloo-hespler.sentex.ca [199.212.135.66])
	by hub.freebsd.org (Postfix) with ESMTP id 0051637B5D7
	for <freebsd-security@FreeBSD.ORG>; Fri,  2 Jun 2000 06:43:32 -0700 (PDT)
	(envelope-from mike@sentex.ca)
Received: from granite.sentex.net (granite-atm.sentex.ca [209.112.4.1])
	by wat-border.sentex.ca (8.9.3/8.9.3) with ESMTP id JAA82237
	for <freebsd-security@FreeBSD.ORG>; Fri, 2 Jun 2000 09:42:57 -0400 (EDT)
	(envelope-from mike@sentex.ca)
Received: from simoeon (simeon.sentex.ca [209.112.4.47]) by granite.sentex.net (8.8.8/8.6.9) with SMTP id JAA04560 for <freebsd-security@FreeBSD.ORG>; Fri, 2 Jun 2000 09:42:57 -0400 (EDT)
Message-Id: <3.0.5.32.20000602093923.0309ed60@marble.sentex.ca>
X-Sender: mdtpop@marble.sentex.ca
X-Mailer: QUALCOMM Windows Eudora Light Version 3.0.5 (32)
Date: Fri, 02 Jun 2000 09:39:23 -0400
To: freebsd-security@FreeBSD.ORG
From: Mike Tancsa <mike@sentex.ca>
Subject: Re: FreeBSDDEATH.c.txt (mmap dirty page no check bug)
In-Reply-To: <20000602140906.I70438@closed-networks.com>
Mime-Version: 1.0
Content-Type: text/plain; charset="us-ascii"
Sender: owner-freebsd-security@FreeBSD.ORG
Precedence: bulk
X-Loop: FreeBSD.org

At 02:09 PM 6/2/00 +0100, User Datagram Protocol wrote:
>This seems to be doing the rounds with the script kiddies fairly quickly.
>I've attached it.
>(originally found at: http://ls.si.ru/tmp/FreeBSDDEATH.c.txt - dumped
>by some skr1pt k1dd1es on irc)


Using the following login class
safe:\
        :copyright=/etc/COPYRIGHT:\
        :welcome=/etc/motd:\
        :setenv=MAIL=/var/mail/$,BLOCKSIZE=K,FTP_PASSIVE_MODE=YES:\
        :path=/sbin /bin /usr/sbin /usr/bin /usr/games /usr/local/sbin
/usr/local/bin /usr/X11R6/bin ~/bin:\
        :nologin=/var/run/nologin:\
        :cputime=unlimited:\
        :datasize=64M:\
        :stacksize=8M:\
        :memorylocked=64M:\
        :memoryuse=64M:\
        :filesize=64M:\
        :coredumpsize=64M:\
        :openfiles=32:\
        :maxproc=32:\
        :priority=0:\
        :ignoretime@:\
        :umask=022:

and running the attached program does not seem to have any effect under

4.0-STABLE FreeBSD 4.0-STABLE #0: Thu Jun  1 10:05:47 EDT 2000 

... Or has this problem been fixed recently ?

	---Mike
------------------------------------------------------------------------
Mike Tancsa,                                      tel +1 519 651 3400
Sentex Communications                             mike@sentex.net
Cambridge, Ontario Canada                         www.sentex.net


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message