Re: mSQL vulnerabilities

[sson () ISERVER COM (Stacey Son)]

Hi,

While fixing up all the buffer overrun problems in mSQL here is
another patch to fix the following quick and dirty DOS attack:

        (1) telnet <your_favorite_msql_server> 1114
        (2) type ^C (control C)

I have found this causes the server to dump and go away.

The patch (for version 2.0.1):

*** net.c.orig  Mon Jul 28 14:19:30 1997
--- net.c       Mon Jul 28 14:20:50 1997
***************
*** 120,127 ****
        int     fd;
  {
        u_char   buf[4];
!       int     len,
!               remain,
                offset,
                numBytes;

--- 120,127 ----
        int     fd;
  {
        u_char   buf[4];
!       u_int   len;
!       int     remain,
                offset,
                numBytes;


Regards,

stacey () iserver com
http://www.iserver.com