CVE

Id
1805  
CVE No.
CVE-2000-0227  
Status
Candidate  
Description
The Linux 2.2.x kernel does not restrict the number of Unix domain sockets as defined by the wmem_max paremeter, which allows local users to cause a denial of service by requesting a large number of sockets.  
Phase
Modified (20010910-01)  
Votes
ACCEPT(8) Armstrong, Baker, Blake, Cole, Collins, Frech, Levy, Ozancin | NOOP(3) Christey, Magdych, Wall  
Comments
Christey> Fix typo: "paremeter" | Magdych> I remember when this came up... seems like there were some wildly | mixed results for the exploit. | Christey> See http://marc.theaimsgroup.com/?l=bugtraq&m=95421263519558&w=2 | for Elias" summary of the mixed results. It looks like | enough people were able to replicate it that we should | include it. | Christey> Fix typo: "paremeter" | CHANGE> [Magdych changed vote from REVIEWING to NOOP]  

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
5651 1805 CVE-2000-0227 BUGTRAQ:20000323 Local Denial-of-Service attack against Linux  View
5652 1805 CVE-2000-0227 URL:http://archives.neohapsis.com/archives/bugtraq/2000-03/0254.html  View
5653 1805 CVE-2000-0227 BUGTRAQ:20000328 Re: Local Denial-of-Service attack against Linux  View
5654 1805 CVE-2000-0227 URL:http://marc.info/?l=bugtraq&m=95421263519558&w=2  View
5655 1805 CVE-2000-0227 BID:1072  View
5656 1805 CVE-2000-0227 URL:http://www.securityfocus.com/bid/1072  View
5657 1805 CVE-2000-0227 XF:linux-domain-socket-dos(4186)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
64236 JVNDB-2000-000016 Linux のドメインソケットにおけるサービス運用妨害 (DoS) の脆弱性 複数のLinux カーネルには、Unix ドメインソケットが /proc/sys/net/core/wmem_max で定義した限界値を無視してしまう脆弱性が存在します。 CVE-2000-0227 1805 2.1 http://jvndb.jvn.jp/ja/contents/2000/JVNDB-2000-000016.html  View