Skip site navigation (1)Skip section navigation (2)
Date:      Mon, 25 May 1998 12:10:21 -0700
From:      Mike Smith <mike@smith.net.au>
To:        Paul Saab <paul@mu.org>
Cc:        freebsd-security@FreeBSD.ORG
Subject:   Re: possible problem with portmap 
Message-ID:  <199805251910.MAA13972@antipodes.cdrom.com>
In-Reply-To: Your message of "Mon, 25 May 1998 12:34:17 CDT." <19980525123417.A19300@mu.org> 

next in thread | previous in thread | raw e-mail | index | archive | help
> Today I logged into our server and noticed someone sitting on port
> 111.  Are there any known problems with portmap?

Yes.

> this is what I got from netstat..
> tcp        0      0  tranq1.sunrpc          dialup239-1-15.s.2988  ESTABLISHED
> tcp        0      0  tranq1.sunrpc          dialup239-1-15.s.2987  ESTABLISHED

Find out who the dialup user is; they're engaged in a portmap-related 
DoS attack on you.

There were changes committed a few days back to address this - it was 
also discussed on BugTraq (with a not inconsiderable degree of hysteria 
it seems).

-- 
\\  Sometimes you're ahead,       \\  Mike Smith
\\  sometimes you're behind.      \\  mike@smith.net.au
\\  The race is long, and in the  \\  msmith@freebsd.org
\\  end it's only with yourself.  \\  msmith@cdrom.com



To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe security" in the body of the message



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?199805251910.MAA13972>