Date: Mon, 28 Feb 2000 02:08:02 -0800 (PST) From: chris.smith@raytheon.co.uk To: freebsd-gnats-submit@FreeBSD.org Subject: i386/17040: Kernel auto-reboot on write to write protected floppy. Message-ID: <200002281008.CAA17460@freefall.freebsd.org>
next in thread | raw e-mail | index | archive | help
>Number: 17040 >Category: i386 >Synopsis: Kernel auto-reboot on write to write protected floppy. >Confidential: no >Severity: serious >Priority: medium >Responsible: freebsd-bugs >State: open >Quarter: >Keywords: >Date-Required: >Class: sw-bug >Submitter-Id: current-users >Arrival-Date: Mon Feb 28 02:10:01 PST 2000 >Closed-Date: >Last-Modified: >Originator: Chris Smith >Release: 3.4-RELEASE >Organization: Raytheon Systems Limited >Environment: uname as 3.4-RELEASE kernel.GENERIC on P3-500 system. >Description: When writing an image to a floppy which is write protected!) using the dd command, there appears to be a buffer related problem and the system automatically reboots itself. >How-To-Repeat: Get an _OpenBSD_ .fs installation image for i386 architecture, write protect a floppy and poke it in the drive and as root execute the following command:- # dd if=floppy26.fs of=/dev/fd0 ..20 secs later, the kernel reboots the system. Help! this does this in userland too if I was kind enough to give the user access to the floppy drive. This could be used agains a FreeBSD box as an attack. >Fix: No fix known. >Release-Note: >Audit-Trail: >Unformatted: To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-bugs" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?200002281008.CAA17460>