From owner-freebsd-questions Tue Dec 5 7:39: 6 2000 From owner-freebsd-questions@FreeBSD.ORG Tue Dec 5 07:39:03 2000 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from fw.wintelcom.net (ns1.wintelcom.net [209.1.153.20]) by hub.freebsd.org (Postfix) with ESMTP id 87CC137B400 for ; Tue, 5 Dec 2000 07:39:03 -0800 (PST) Received: (from bright@localhost) by fw.wintelcom.net (8.10.0/8.10.0) id eB5FZQk18154; Tue, 5 Dec 2000 07:35:26 -0800 (PST) Date: Tue, 5 Dec 2000 07:35:26 -0800 From: Alfred Perlstein To: Siegbert Baude Cc: Jeremiah Gowdy , freebsd-questions@FreeBSD.ORG Subject: Re: A SECOND RAZOR/BINDVIEW ADVISORY !!! FreeBSD Admins ARE vulnerable !!! Message-ID: <20001205073525.X8051@fw.wintelcom.net> References: <005d01c05e69$794d73f0$aa240018@cx443070b> <3A2D08DF.E07321B3@gmx.de> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline User-Agent: Mutt/1.2.5i In-Reply-To: <3A2D08DF.E07321B3@gmx.de>; from siegbert.baude@gmx.de on Tue, Dec 05, 2000 at 04:25:19PM +0100 Sender: bright@fw.wintelcom.net Sender: owner-freebsd-questions@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.ORG * Siegbert Baude [001205 07:25] wrote: > Hi Jeremiah, > > nice piece of parody. :-) > Are you referring to: > http://razor.bindview.com/publish/advisories/adv_NAPTHA.html ? > > What about the paragraph: > - FreeBSD 4.0-REL became unusable after 495 connections to the ssh > port. Each connection started an instance of the daemon which quickly > exhausted available file handles; the system reports "too many open > files in system". After approximately 30 minutes the connections start > timing out and the system becomes usable again. The problem with sshd was fixed several months ago, before FreeBSD 4.1 came out. FreeBSD's sshd is modified to throttle and quickly drop unauthorized connections so this probably doesn't apply. Even if it did cause some sort of resource problem it would be trivial to track the idiot down and break his arms and legs like my advisory suggests. -- -Alfred Perlstein - [bright@wintelcom.net|alfred@freebsd.org] "I have the heart of a child; I keep it in a jar on my desk." To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message