Re: DoS-ing sysklogd?

To: bugtraq@xxxxxxxxxxxxxxxxx
Subject: Re: DoS-ing sysklogd?
From: Bernhard Fischer <bernhard.fischer@xxxxxxxxxxxxxxxxxx>
Date: Mon, 3 Apr 2006 17:10:19 +0200
Cc: Milen Rangelov <mrangelov@xxxxxxxxx>
In-reply-to: <1143808643.6913.105.camel@xxxxxxxxxxxxxxxxx>
List-help: <mailto:bugtraq-help@securityfocus.com>
List-id: <bugtraq.list-id.securityfocus.com>
List-post: <mailto:bugtraq@securityfocus.com>
List-subscribe: <mailto:bugtraq-subscribe@securityfocus.com>
List-unsubscribe: <mailto:bugtraq-unsubscribe@securityfocus.com>
Mailing-list: contact bugtraq-help@xxxxxxxxxxxxxxxxx; run by ezmlm
Organization: FH St. Poelten
References: <1143808643.6913.105.camel@xxxxxxxxxxxxxxxxx>
User-agent: KMail/1.8.2

On Friday 31 March 2006 14:37, Milen Rangelov wrote:
> A lot of people configure sysklogd to collect log messages from the
> network with the "-r" option.

Why do you think a lot of people do that?
I think they don't, because the default setting usually is to not accept 
network packets. So if somebody opens his syslogd to receive network packets 
he should know what he does and keep his box clean of junk packets.

Regards,
bh

Attachment: pgpH376MvILNG.pgp
Description: PGP signature

References:
- DoS-ing sysklogd?
  - From: Milen Rangelov

Prev by Date: Barracuda LHA archiver security bug leads to remote compromise
Next by Date: Re: DoS-ing sysklogd?
Previous by thread: DoS-ing sysklogd?
Next by thread: Re: DoS-ing sysklogd?
Index(es):
- Date
- Thread