Mailing Lists: Apple Mailing Lists

Image of Mac OS face in stamp
 
[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: CPU Load to 100%



On Fri, May 16, 2008 at 11:19 AM, Marc Goldberg
<email@hidden> wrote:
> If you're able to reliably reproduce, try ssh -vvv hostname to get debug
> messages... see if there are any interesting messages that give a clue as to
> the source of the problem...

The cause of the problem is already known: Apple screwed up in both
sshd and Terminal.app with respect to opening and closing virtual
terminals (the openpty(3) function).  It's currently being tracked as
rdar://5685756, according to this page:
http://discussions.apple.com/thread.jspa?threadID=1277952&tstart=0

The problem I have is that this is such a basic DoS vector that to not
have fixed it already is unthinkable.  Any attempt to ssh into a
vulnerable machine can trigger this behavior.

--Kyle Sluder
 _______________________________________________
Do not post admin requests to the list. They will be ignored.
Macos-x-server mailing list      (email@hidden)
Help/Unsubscribe/Update your Subscription:
http://lists.apple.com/mailman/options/macos-x-server/email@hidden

This email sent to email@hidden

References: 
 >CPU Load to 100% (From: Richard Good <email@hidden>)
 >Re: CPU Load to 100% (From: "Kyle Sluder" <email@hidden>)
 >Re: CPU Load to 100% (From: Jose Hales-Garcia <email@hidden>)
 >Re: CPU Load to 100% (From: Marc Goldberg <email@hidden>)



Visit the Apple Store online or at retail locations.
1-800-MY-APPLE

Contact Apple | Terms of Use | Privacy Policy

Copyright © 2007 Apple Inc. All rights reserved.