RE: Tux DOS attack via Host: overflow

Ingo Molnar <[email protected]> Mon, 15 Apr 2002 07:21:07 +0200 (CEST)

Newsgroups	gmane.network.tux
Message-ID	<[email protected]>

On Thu, 11 Apr 2002, Matthijs van der Klip wrote:

> > I'm wondering if the DOS attack described in
> > http://www.securiteam.com/unixfocus/6B0080U35E.html has been 
> > fixed.
> 
> The DOS attack described on this webpage does not work on my
> Tux servers (RH7.1/tux-2.1.0-2). I think this bug was fixed.

yes, it's fixed in all recent TUX versions. [the bug was found and
reported to us as a result of a security audit by Aidan O'Rawe, who
wrote the advisory as well.]

	Ingo