[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [cobalt-security] FTPD DoS (x-posted to cobalt-users)



On Sat, 17 Mar 2001, Jonathan Michaelson wrote:

> > Within the last few hours it's become clear theres a simple DoS in
> > Cobalt's FTPd which causes the RaQ (2/3/4i) to shoot to 100% cpu load.
> > Repeat the steps a few times (takes minutes to do) and the RaQ completely
> > stops responding (well, it becomes so lagged its completely unusable at
> > any rate), and you have to hit the reset switch.
>
> There is now a published workaround which I've tested on both RaQ3'sand
> RaQ4's:
> http://bugs.proftpd.org/show_bug.cgi?id=1066

<snip>

Yep, I've got a similar workaround on my RaQ.  I actually made this post a
few days ago, but its only just appeared.  I suspect either
list.cobalt.com is a bit broken, or Cobalt are moderating the list.

Regards,
Gossi.