Description
A default configuration of in.identd in SuSE Linux waits 120 seconds between requests, allowing a remote attacker to conduct a denial of service.
Affected products
- slackware / slackware_linux3.2 – 3.2
- slackware / slackware_linux3.6 – 3.6
- SUSE / suse_linux4.4 – 4.4
- SUSE / suse_linux4.4.1 – 4.4.1
- SUSE / suse_linux5.0 – 5.0
- SUSE / suse_linux5.1 – 5.1
- SUSE / suse_linux5.2 – 5.2
- SUSE / suse_linux5.3 – 5.3
- SUSE / suse_linux6.0 – 6.0
- SUSE / suse_linux6.1 – 6.1
- SUSE / suse_linux6.2 – 6.2
Exploits & proofs of concept
- exploit-dbSuSE Linux 6.2 / Slackware Linux 3.2/3.6 - 'identd' Denial of Serviceby friedolin
References
Updated 26m ago · 8 sources