mailing list archives
Re: NFS Denial of Service advisory from Sun
From: Edsel Adap <edsel () adap org>
Date: Fri, 18 Oct 2002 08:55:11 -0400
I tested this on my Solaris NFS server and it didn't kill lockd.
However there are many ways to DoS a Solaris NFS server.
One of them is to put a RedHat 7.3 (original kernel) on the network
as an NFS client then initiate a large read over NFS and watch the
Solaris NFS server become unresponsive to pings. As soon as you kill
the read everything goes back to normal.
On Thu, Oct 17, 2002 at 12:21:50PM +0000, m g wrote:
Today, Sun released an advisory (47815) about how the lockd can be used to
cause a DoS of NFS. However they did not provide any details about how the
lockd can be killed to trigger this. See
Does anyone know if this security issue is somehow related to the Bugtraq
posting from Mike Murray about lockd and nfs on Linux from June 2000, see:
I currently don't have a Sun box available to test it myself, so perhaps
someone else can verify this or provide me information about this.
Grtx Mike G. (not Mike Murray)
Unlimited Internet access for only $21.95/month. Try MSN!
edsel () adap org
http://www.adap.org/~edsel/ LINUX - the choice of the GNU generation
"Netscape is an application which grows to fill all available memory." - me