Autor: Mirek Nowakowski (nowam_nospam_at_limes.com.pl)
Data: Wed 16 Jun 1999 - 15:03:13 MET DST
This is a multi-part message in MIME format.
--------------F5015DA11E5E24C72E12F027
Content-Type: text/plain; charset=iso-8859-2
Content-Transfer-Encoding: 7bit
Ave!
Informacje o tym DoS znalazlem to przed chwila w poczcie. Calosc w
zalaczniku.
OSciski!
Mirek Nowakowski
--------------F5015DA11E5E24C72E12F027
Content-Type: text/plain; charset=iso-8859-2;
name="dos"
Content-Transfer-Encoding: 7bit
Content-Disposition: inline;
filename="dos"
>From phile_at_phile.com.au Wed Jun 16 14:54:50 1999
Received: from mail.stat.com (stat.com [207.211.1.10])
by sunrise.pg.gda.pl (8.8.8/8.8.8) with SMTP id XAA00097
for <nowam_at_pg.gda.pl>; Tue, 15 Jun 1999 23:59:34 +0200 (MET DST)
Received: from stat.com (stat.com [207.211.1.10] ) by mail.stat.com
(Hethmon Brothers Smtpd) ; Tue, 15 Jun 1999 14:53:46 -0700
Received: from names.phile.com.au (philli.lnk.telstra.net [139.130.44.202] ) by mail.stat.com
(Hethmon Brothers Smtpd) ; Tue, 15 Jun 1999 14:53:41 -0700
Received: from ibmmx200.phile.com.au (ibmmx200.phile.com.au [203.35.202.130] ) by names.phile.com.au
(Hethmon Brothers Smtpd) ; Wed, 16 Jun 1999 07:51:09 +1000
Message-Id: <199906160751.0929993.8_at_names.phile.com.au>
X-Mailer: PMMail 2.00.1500 for OS/2 Warp 4.00
MIME-Version: 1.0
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Date: Tue, 15 Jun 1999 14:53:43 -0700
X-OldDate: Wed, 16 Jun 1999 07:53:24 +1100 (EDT)
Sender: os2-isp-owner <os2-isp-owner_at_stat.com>
X-Listname: os2-isp_at_stat.com
Reply-To: os2-isp_at_stat.com
From: "Phillip" <phile_at_phile.com.au>
To: "os2-isp_at_stat.com" <os2-isp_at_stat.com>
Subject: ICMP DoS for Warp Sever
I just read this one while updating my mirror of Lorens'
News and Rumours. Don't know how true it is, but it's better
to be safe.
[1999-06-15] - ICMP DoS attack for OS/2
On the late evening of friday 11th of june, we at Pepper Head discovered a DoS attack that could crash any OS/2
machine running TCP/IP 4.1 or higher, that is, MPTS 5.x or 6.x. This includes also OS/2 Warp Server for e-business.
The exploit was first discovered on Linux 2.2.x kernels on the 1st of June, and when we tried it on one of our servers, it
died instantly with a trap 000e.
We found this error to be serious enough to want to try alerting IBM as soon as possible. Spending the next 24 hours on
the phone to various IBM offices around the globe, we were finally able to get in touch with someone that really
understood the severity of the problem. So they started working on the problem on saturday, and today we got the fix -
directly from the developers.
This fix has not yet been posted to IBM's official sites, but until it is, it can be found at hobbes.nmsu.edu.
( ftp://hobbes.nmsu.edu/pub/incoming/icmpfix.zip )
Or follow the link on one of the Warp News sites/mirrors
eg. http://www.phile.com.au/warpnews/index.html
Cheers
Phillip
--------------F5015DA11E5E24C72E12F027--
To archiwum zostało wygenerowane przez hypermail 2.1.7 : Tue 18 May 2004 - 15:22:53 MET DST