Bugtraq: Re: local telnetd DoS

[hno () HEM PASSAGEN SE (Henrik Nordstrom)]

Zo0mer wrote:
> Hi,i found local DoS that Crash telnetd (tested on Slackware 4.0, RH 5.2)
> type
> telnet localhost | telnet localhost | telnet localhost ...... about 50 times
> result will be 'Connection Refused' , telnetd crash.
Sounds very much like inetd service respawn rate limitation. The default
rate limit is usually something like 40 accesses/minute. See your inetd
documentation for exact value of the default limit and how it may be
tuned.

The purpose of this limit is to limit the DOS attack to only the service
attacked and not bring down the whole machine by resource exhaustion
(memory, processes, CPU).

--
Henrik Nordstrom