Home page logo
/

fulldisclosure logo Full Disclosure mailing list archives

OpenBSD implementation of the libc's RPC (portmap) remote DoS.
From: auto236751 () hushmail com
Date: Thu, 22 Nov 2012 17:30:38 +0100

Hi list,

As some of you could recently notice a new OpenBSD 5.2 was released.
To celebrate it we provide you with the shiny ~9yearer, which is
probably heck of a long time.
Another funny thing about this bug is, that it's only OpenBSD's libc
specific.
But there is no much excitement about it though, as we weren't able to
achive RCE and the
portmap is disabled by default. Maybe some of you will have more luck
with it than we had.
The bug is also interesting because of it's nature. Why? Check it by
yourself (hint: global variables).
As stated in
http://www.openbsd.org/cgi-bin/cvsweb/src/lib/libc/rpc/svc_tcp.c#rev1.23,
many people tested it and weren't able to spot it.

Happy hacking...

$ cat >> openbsd_libc_portmap.c 
_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/

  By Date           By Thread  

Current thread:
  • OpenBSD implementation of the libc's RPC (portmap) remote DoS. auto236751 (Nov 26)
[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]