OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
Bugtraq Archives: Big problem on 2.0.x?

Big problem on 2.0.x?

Subject: Big problem on 2.0.x?
From: Eduardo Cruz (eduardo.cruzTS-G.COM)
Date: Thu Dec 09 1999 - 10:51:45 CST

Hello ppl.

Last week i was playing with my old linux 2.0.36 i486 box, while i was playing with the command ping and trying combinations of commands
i found that when u do a ping -s 65468 -R ANYIPADDRESS ( -R record route) the system starts to print on the screen kernel dumps
, freezes complitely and after few secconds the system reboots.

The major problem with this (if this is a bug, because i dont have time to install differents kernels and test it better) is that command can be run by everyone
because you dont need root permissions to make a -R.

I tested this on a 2.0.35 and .36 (both slackware), when u try to do this on a 2.2.x the system prints out "message too long".
I think the problem is that there is a size-check missed when u reach the maximun packet size and u put the route information, but anyway
i am not a guru on kernels.

So, now is time for the kernel experts :)

---------------------------------------------------------------------------
  Eduardo Cruz - eduardo.cruz.ts-g.com
  Network Administrator
  Telecomm Solutions Group
  Tel: +350 74146 Fax: +350 41781
---------------------------------------------------------------

This archive was generated by hypermail 2b27 : Fri Dec 10 1999 - 13:32:18 CST