From owner-freebsd-security@FreeBSD.ORG Wed Sep 7 22:37:48 2005 Return-Path: X-Original-To: freebsd-security@freebsd.org Delivered-To: freebsd-security@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id EC25916A41F for ; Wed, 7 Sep 2005 22:37:48 +0000 (GMT) (envelope-from brdavis@odin.ac.hmc.edu) Received: from odin.ac.hmc.edu (Odin.AC.HMC.Edu [134.173.32.75]) by mx1.FreeBSD.org (Postfix) with ESMTP id 9284C43D48 for ; Wed, 7 Sep 2005 22:37:48 +0000 (GMT) (envelope-from brdavis@odin.ac.hmc.edu) Received: from odin.ac.hmc.edu (localhost.localdomain [127.0.0.1]) by odin.ac.hmc.edu (8.13.0/8.13.0) with ESMTP id j87Mbmak004663; Wed, 7 Sep 2005 15:37:48 -0700 Received: (from brdavis@localhost) by odin.ac.hmc.edu (8.13.0/8.13.0/Submit) id j87MbmJC004662; Wed, 7 Sep 2005 15:37:48 -0700 Date: Wed, 7 Sep 2005 15:37:48 -0700 From: Brooks Davis To: talonz Message-ID: <20050907223748.GB563@odin.ac.hmc.edu> References: <431F6941.20006@gmail.com> Mime-Version: 1.0 Content-Type: multipart/signed; micalg=pgp-sha1; protocol="application/pgp-signature"; boundary="9zSXsLTf0vkW971A" Content-Disposition: inline In-Reply-To: <431F6941.20006@gmail.com> User-Agent: Mutt/1.4.1i X-Virus-Scanned: by amavisd-new X-Spam-Status: No, hits=0.0 required=8.0 tests=none autolearn=no version=2.63 X-Spam-Checker-Version: SpamAssassin 2.63 (2004-01-11) on odin.ac.hmc.edu Cc: freebsd-security@freebsd.org Subject: Re: ee using 99% cpu after user ssh session terminates abnormaly X-BeenThere: freebsd-security@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: "Security issues \[members-only posting\]" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 07 Sep 2005 22:37:49 -0000 --9zSXsLTf0vkW971A Content-Type: text/plain; charset=us-ascii Content-Disposition: inline Content-Transfer-Encoding: quoted-printable On Thu, Sep 08, 2005 at 08:27:13AM +1000, talonz wrote: > Recently i have been using a dialup 56k account to access the net > and have noticed that when my ssh session times out and I am editing > a file in ` ee ' the system goes to 99% cpu usage and stays like > this till the pid is killed. > This is a standard user account (not root/su) >=20 > Would a user be able to create a denial of service condition > on the remote system using this bug? No more then they could with the ablity to run any other program that loops. > (sorry if this is posted to the incorrect list) >=20 > Details: >=20 > System - FreeBSD 5.4-RELEASE-p5 >=20 > ee using 99% cpu after user session terminates abnormaly > PID reported by top. >=20 > The output from ps looks like this >=20 > [root@blah][~]$ ps aux| grep 70464 > someuser 70464 93.5 0.1 1920 1372 p1- R 7:09PM 687:07.27 ee file I can't seem to trigger this bug on a 7.0 machine either by killing the client or using tcpdrop to kill the tcp session. -- Brooks --=20 Any statement of the form "X is the one, true Y" is FALSE. PGP fingerprint 655D 519C 26A7 82E7 2529 9BF0 5D8E 8BE9 F238 1AD4 --9zSXsLTf0vkW971A Content-Type: application/pgp-signature Content-Disposition: inline -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.2.1 (GNU/Linux) iD8DBQFDH2u6XY6L6fI4GtQRArkNAJ9SOXr8aBvKwWuL/SoIJAYHDK7CkwCgzRJ1 /HIL+ahXnwgKMY1+djjrts8= =LzZd -----END PGP SIGNATURE----- --9zSXsLTf0vkW971A--