From: Brooks Davis (brooksone-eyed-alien.net)
Date: Wed Sep 07 2005 - 17:37:48 CDT

• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

On Thu, Sep 08, 2005 at 08:27:13AM +1000, talonz wrote:
> Recently i have been using a dialup 56k account to access the net
> and have noticed that when my ssh session times out and I am editing
> a file in ` ee ' the system goes to 99% cpu usage and stays like
> this till the pid is killed.
> This is a standard user account (not root/su)
>
> Would a user be able to create a denial of service condition
> on the remote system using this bug?

No more then they could with the ablity to run any other program that
loops.

> (sorry if this is posted to the incorrect list)
>
> Details:
>
> System - FreeBSD 5.4-RELEASE-p5
>
> ee using 99% cpu after user session terminates abnormaly
> PID reported by top.
>
> The output from ps looks like this
>
> [rootblah][~]$ ps aux| grep 70464
> someuser 70464 93.5 0.1 1920 1372 p1- R 7:09PM 687:07.27 ee file

I can't seem to trigger this bug on a 7.0 machine either by killing the
client or using tcpdrop to kill the tcp session.

-- Brooks

--
Any statement of the form "X is the one, true Y" is FALSE.
PGP fingerprint 655D 519C 26A7 82E7 2529 9BF0 5D8E 8BE9 F238 1AD4

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.1 (GNU/Linux)

iD8DBQFDH2u6XY6L6fI4GtQRArkNAJ9SOXr8aBvKwWuL/SoIJAYHDK7CkwCgzRJ1
/HIL+ahXnwgKMY1+djjrts8=
=LzZd
-----END PGP SIGNATURE-----

• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]