|
Bugtraq
mailing list archives
[Suspected Spam][CVE-2008-4042] Postfix Linux-only local denial of service - PoC
From: Albert Sellarès <whats () wekk net>
Date: Tue, 16 Sep 2008 22:20:15 +0200
Hello,
I have released this PoC for the Linux-only local denial of service
caused by the leak of epoll file descriptors.
This Proof of concept creates a pipe and adds it in postfix's epoll file
descriptor.
When the pipe is added, an endless loop will launch lots of events to
the local and master postfix processes.
This PoC will slowdown the system a lot.
You can find all the needed files at
http://www.wekk.net/research/CVE-2008-4042/ and
http://www.wekk.net/research/CVE-2008-3889/ and attached with this
email.
Feel free to write me for feedback, corrections, etc.
--
Albert Sellarès GPG id: 0x13053FFE
http://www.wekk.net whats_up () jabber org
Linux User: 324456 Catalunya
Attachment:
CVE-2008-4042-exploit.c
Description:
Attachment:
signature.asc
Description: Això és una part d'un missatge, signada digitalment
By Date
By Thread
Current thread:
- [Suspected Spam][CVE-2008-4042] Postfix Linux-only local denial of service - PoC Albert Sellarès (Sep 16)
|