bugtraq - [Suspected Spam][CVE-2008-4042] Postfix Linux-only local denial of service

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [day] [month] [year] [list]

Date: Tue, 16 Sep 2008 22:20:15 +0200
From: Albert Sellarès <whats@...k.net>
To: bugtraq@...urityfocus.com
Subject: [Suspected Spam][CVE-2008-4042] Postfix Linux-only local denial of service - PoC

Hello,

I have released this PoC for the Linux-only local denial of service
caused by the leak of epoll file descriptors.

This Proof of concept creates a pipe and adds it in postfix's epoll file
descriptor.
When the pipe is added, an endless loop will launch lots of events to
the local and master postfix processes. 
This PoC will slowdown the system a lot.

You can find all the needed files at
http://www.wekk.net/research/CVE-2008-4042/ and
http://www.wekk.net/research/CVE-2008-3889/ and attached with this
email.

Feel free to write me for feedback, corrections, etc.

-- 
  Albert Sellarès        GPG id: 0x13053FFE
  http://www.wekk.net    whats_up@...ber.org 
  Linux User: 324456     Catalunya           

View attachment "CVE-2008-4042-exploit.c" of type "text/x-csrc" (3011 bytes)

Download attachment "signature.asc" of type "application/pgp-signature" (198 bytes)