Vulnerability Development: Re: ping flooding as normal user

[Glen Rosenblatt <glenr () COLUMBIA EDU>]

the problem is you aren't flooding, you are just sending the data, also
there is no use for normal users to have access to ping , chmod 700 ping,
and you are all set

On Mon, 14 Aug 2000, Slawek wrote:

> Hello,
>
>
> I'm not sure if it's new informations, but as far as I can see it works at
> least on most of current systems (worked everywhere I could test it).
>
>
> The problem is:
>
> -s parameter of ping command has no upper limit for normal users.
> This allows normal users to send for example 1 * 60000 bytes of ICMP data
> per second (from one copy of ping invoked)
>
> I think it's just great for DoSing ;o)
>
>
> Bye,
> Slawek
Glen Rosenblatt                        glenr () columbia edu
Columbia University                    AcIS Network Systems Group