headers
Dhanya Madhusudan | 20 Mar 2012 11:36
Picon

Bug details required


Hi Team,

We are having a problem with our client which hangs on call to
_non_existent().

The server is on MICO v2.3.11.
I came across the below information from mico-devel for "fix possible
_non_existent call DoS vulnerability (reported by
  Christoph Becker)" from version 2.3.13.

http://permalink.gmane.org/gmane.comp.corba.mico.devel/262

I need the complete bug details to understand if we are also facing a
similar problem

Please give me the reference for the same.

Thanks,
Dhanya

------------------------------------------------------------------------------
This SF email is sponsosred by:
Try Windows Azure free for 90 days Click Here 
http://p.sf.net/sfu/sfd2d-msazure
Permalink | Reply | 1 comment |
headers
Karel Gardas | 20 Mar 2012 12:18
Favicon

Re: Bug details required


Does darcs changes on HEAD work for you? If so you can search and find this:

Sun Jul  9 00:34:46 CEST 2006  Karel Gardas <kgardas <at> objectsecurity.com>
   * fix possible _non_existent call DoS vulnerability (reported by 
Christoph Becker)
   This patch fixes possible _non_existent call DoS vulnerability. Them>
   problem was observed when sending _non_existent message together with
   corrupted target object ID. Actual problem was to try to answer
   incorrectly initialized invocation which resulted in assert. The fix>
   is to initialize invocation properly even in case of _non_existent 
callty improvement)
   where we're not able to find appropriate OA and which is answered by
   the ORB itself. The issue was reported by Christoph Becker.is

Cheers,
Karel

On 03/20/12 11:36 AM, Dhanya Madhusudan wrote:
>
> Hi Team,
>
> We are having a problem with our client which hangs on call to
> _non_existent().
>
> The server is on MICO v2.3.11.
> I came across the below information from mico-devel for "fix possible
> _non_existent call DoS vulnerability (reported by
>    Christoph Becker)" from version 2.3.13.
>
(Continue reading)

Permalink | Reply | 0 comments |

Gmane