bugtraq - Re: DoS in Rsniff 1.0

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [day] [month] [year] [list]

Message-ID: <20040409185420.0220d0ec.aluigi@altervista.org>
Date: Fri, 9 Apr 2004 18:54:20 +0000
From: Luigi Auriemma <aluigi@...ervista.org>
To: bugtraq@...urityfocus.com, bugs@...uritytracker.com,
	news@...uriteam.com, full-disclosure@...ts.netsys.com
Subject: Re: DoS in Rsniff 1.0


> 153    {
> 154        printf ("RSniff Server: Authentication failed!\n");
> 155        continue;
> 156        close (new_sockfd);  /* PATCH */
> 157    }


Excuse me but I have made an error here (lines 155 and 156) the close()
naturally must be located before the "continue;":

153    {
154        printf ("RSniff Server: Authentication failed!\n");
155        close (new_sockfd);  /* PATCH */
156        continue;
157    }


Sorry again and thanx to Rich to have showed me the error.


BYEZ


--- 
Luigi Auriemma
http://aluigi.altervista.org