[syslog-ng]syslog-ng crash
Nate Campi
nate@campin.net
Fri, 1 Feb 2002 15:14:09 -0800
On Fri, Feb 01, 2002 at 09:28:43PM +0100, Gregor Binder wrote:
> William D. Colburn (aka Schlake) on Fri, Feb 01, 2002 at 12:58:57PM -0700:
>
> > Normally I would disclose the crash to the list, but if no fix will be
> > forthcoming I am afraid too let other people know how to down a server.
> >
>
> I strongly suggest you publish this problem to this list, or, if it is
> relevant enough, to the security-lists (vuln-dev, bugtraq, whatever you
> see fits).
My turn to agree with Gregor.
Also I should mention that this may not even be a vulnerability. Talk to
us, discuss what you see happening. Denial of service problems usually
exist with every service on every IP network - maybe it's something
like that. Maybe the problem can be patched by a casual C hacker and can
be fixed on this list immediately, even if Balazs isn't around.
Share with us.
--
Nate Campi
"Usenet isn't a right. It's a right, a left, and a swift uppercut to the
jaw." -Computer Museum (Boston)