mailing list archives
OpenBSD implementation of the libc's RPC (portmap) remote DoS.
From: auto236751 () hushmail com
Date: Thu, 22 Nov 2012 17:30:38 +0100
As some of you could recently notice a new OpenBSD 5.2 was released.
To celebrate it we provide you with the shiny ~9yearer, which is
probably heck of a long time.
Another funny thing about this bug is, that it's only OpenBSD's libc
But there is no much excitement about it though, as we weren't able to
achive RCE and the
portmap is disabled by default. Maybe some of you will have more luck
with it than we had.
The bug is also interesting because of it's nature. Why? Check it by
yourself (hint: global variables).
As stated in
many people tested it and weren't able to spot it.
$ cat >> openbsd_libc_portmap.c
Full-Disclosure - We believe in it.
Hosted and sponsored by Secunia - http://secunia.com/
- OpenBSD implementation of the libc's RPC (portmap) remote DoS. auto236751 (Nov 26)