Full Disclosure: OpenBSD implementation of the libc's RPC (portmap) remote DoS.

[auto236751 () hushmail com]

Hi list,

As some of you could recently notice a new OpenBSD 5.2 was released.
To celebrate it we provide you with the shiny ~9yearer, which is
probably heck of a long time.
Another funny thing about this bug is, that it's only OpenBSD's libc
specific.
But there is no much excitement about it though, as we weren't able to
achive RCE and the
portmap is disabled by default. Maybe some of you will have more luck
with it than we had.
The bug is also interesting because of it's nature. Why? Check it by
yourself (hint: global variables).
As stated in
http://www.openbsd.org/cgi-bin/cvsweb/src/lib/libc/rpc/svc_tcp.c#rev1.23,
many people tested it and weren't able to spot it.

Happy hacking...

$ cat >> openbsd_libc_portmap.c

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/