Debian Bug report logs - #22184
hi. I'd like to point out a possible bug.

Toggle useless messages

Message #5 received at submit@bugs.debian.org (full text, mbox, reply):

From: Rage NotGiven <rage@email.ro>

To: submit@bugs.debian.org

Subject: hi. I'd like to point out a possible bug.

Date: Thu, 7 May 1998 06:09:24 +0300

I've found a Denial Of Service attack that seems only to crash Debian Linux. 
I'v tried this attack on other Debian users, it crashed them. I have tried
it on slackware, redhat, windows, and some misca linuxes, and it does
not crash then. it involves sending 1000 spoofed SYN packets to each of these
ports in this order: 7,9,13,19,21,23,37,80,111,137,138,139, and 194
I don't know how or why this works, but i know it does. the entire
system stops responding, and it just keeps printing this message:
Ouch, no kerneld message from XXXXXXXXXX
that's when it dies. Sometimes it reboots shortly after. I would appreciate feedback
on this matter. my email is rage@email.ro    Thanks in advance.

_____________________________________________________________________
Do you want a free e-mail for life ? Get it at http://www.email.ro/

Message #12 received at 22184@bugs.debian.org (full text, mbox, reply):

From: Manoj Srivastava <srivasta@datasync.com>

To: control@bugs.debian.org

Cc: jdassen@wi.leidenuniv.nl, 22184@bugs.debian.org, debian-security-private@lists.debian.org, rage@email.ro

Subject: Bug#22184: security hole

Date: 07 May 1998 15:30:33 -0500

reassign 22184 kernel-source-2.0.33
quit

Hi,

	kernel-package does not seem appropriate for this report; all
 kernel-package does is arrange to have a make run in the kernel sorce
 tree, and has no control over how the resulting kernel handles SYN
 packets. However, I think I shall reassign it to kernel-source, in
 the hope that Herbert can do something with it.

	I am also copying this to the security response team, since
 this is an issue that needs to be investigated and clarified ASAP.

	manoj

______________________________________________________________________
I've found a Denial Of Service attack that seems only to crash Debian
Linux.  I'v tried this attack on other Debian users, it crashed
them. I have tried it on slackware, redhat, windows, and some misca
linuxes, and it does not crash then. it involves sending 1000 spoofed
SYN packets to each of these ports in this order:
7,9,13,19,21,23,37,80,111,137,138,139, and 194 I don't know how or why
this works, but i know it does. the entire system stops responding,
and it just keeps printing this message: Ouch, no kerneld message from
XXXXXXXXXX that's when it dies. Sometimes it reboots shortly after. I
would appreciate feedback on this matter. my email is rage@email.ro
Thanks in advance.
______________________________________________________________________

-- 
 "Being against torture ought to be sort of a multipartisan thing."
 Karl Lehenbauer, as amended by Jeff Daiell, a Libertarian
Manoj Srivastava  <srivasta@acm.org> <http://www.datasync.com/%7Esrivasta/>
Key C7261095 fingerprint = CB D9 F4 12 68 07 E4 05  CC 2D 27 12 1D F5 E8 6E

Message #19 received at 22184@bugs.debian.org (full text, mbox, reply):

From: Herbert Xu <herbert@gondor.apana.org.au>

To: rage@email.ro

Cc: joey@kuolema.Infodrom.North.DE, 22184@bugs.debian.org

Subject: dos attack

Date: Sun, 10 May 1998 15:50:17 +1000 (EST)

Please provide more information, e.g., Debian kernel package version, code to
exploit the bug, kernel versions of other Linux systems that you tested
against.  Thanks.
-- 
Debian GNU/Linux 1.3 is out! ( http://www.debian.org/ )
Email:  Herbert Xu ~{PmV>HI~} <herbert@gondor.apana.org.au>
Home Page: http://gondor.apana.org.au/~herbert/
PGP Key: http://gondor.apana.org.au/~herbert/pubkey.txt

Message #26 received at 22184-done@bugs.debian.org (full text, mbox, reply):

From: Robert Woodcock <rcw@debian.org>

To: 22184-done@bugs.debian.org

Subject: no new info since 1998? no reproduction? this bug dies

Date: Sun, 17 Oct 1999 00:17:16 -0700

DIE
-- 
Robert Woodcock - rcw@debian.org
"Hacking... is a completely creepy thing to do." -- US Department Of Justice

Send a report that this bug log contains spam.