I'm still having memory issues with AOLserver 4. I have stopped the
indefinite respawning of aolserver processes, but as soon as aolserver is
started, it just keeps growing and growing in size.
When it gets to have a size around 600M (with the RSS about 534M), it just
hangs, or it will give
Message-
From: AOLserver Discussion
[mailto:[EMAIL PROTECTED] Behalf
Of Brad Chick
Sent: Monday, December 01, 2003 9:06 AM
To: [EMAIL PROTECTED]
Subject: Re: [AOLSERVER] aolserver 4 continually respawning
I'm still having memory issues with AOLserver 4. I have stopped the
indefinite
.
Regards,
Greg
-Original Message-
From: AOLserver Discussion
[mailto:[EMAIL PROTECTED] Behalf
Of Brad Chick
Sent: Monday, December 01, 2003 9:06 AM
To: [EMAIL PROTECTED]
Subject: Re: [AOLSERVER] aolserver 4 continually respawning
I'm still having memory issues with AOLserver 4. I have
Message-
From: AOLserver Discussion
[mailto:[EMAIL PROTECTED] Behalf
Of Brad Chick
Sent: Monday, December 01, 2003 9:06 AM
To: [EMAIL PROTECTED]
Subject: Re: [AOLSERVER] aolserver 4 continually respawning
I'm still having memory issues with AOLserver 4. I have stopped
What is the inittab line your using?
--
AOLserver - http://www.aolserver.com/
To Remove yourself from this list, simply send an email to [EMAIL PROTECTED] with the
body of "SIGNOFF AOLSERVER" in the email message. You can leave the Subject: field of your email blank.
On Monday 24 November 2003 16:20, you wrote:
We are running aolserver 4GM on debian and are having trouble keeping it
alive. The problem seems to be that somehow, aolserver continually respawns
until there are ~100 or more processes running (identified by a ps). At
that point, aolserver either
This is someone brute forcing the remote heap overflow in AolServer.
-dave
Brad Chick wrote:
We are running aolserver 4GM on debian and are having trouble keeping it
alive. The problem seems to be that somehow, aolserver continually respawns
until there are ~100 or more processes running
It's not an unknown reason, it's a remote root which you guys already
fixed in 3.4...add the Content-Length check to 4.0 and you should be set.
-dave
Zoran Vasiljevic wrote:
On Monday 24 November 2003 16:20, you wrote:
We are running aolserver 4GM on debian and are having trouble keeping it
On Mon, Nov 24, 2003 at 10:19:05AM -0500, Dave Aitel wrote:
This is someone brute forcing the remote heap overflow in AolServer.
Is this bug documented somewhere? Could it be one of these two?
http://sourceforge.net/tracker/?group_id=3152atid=103152func=detailaid=229071
Thanks for reporting. I've asked someone on my team to look into this.
We'll let you know what we find.
- Nathan
Andrew Piskorski wrote on 11/24/03, 10:59 AM:
On Mon, Nov 24, 2003 at 10:19:05AM -0500, Dave Aitel wrote:
This is someone brute forcing the remote heap overflow in AolServer.
Andrew Piskorski wrote:
On Mon, Nov 24, 2003 at 10:19:05AM -0500, Dave Aitel wrote:
This is someone brute forcing the remote heap overflow in AolServer.
Is this bug documented somewhere? Could it be one of these two?
On Mon, 24 Nov 2003 10:30:32 -0500, Dave Aitel [EMAIL PROTECTED] wrote:
It's not an unknown reason, it's a remote root which you guys already
fixed in 3.4...add the Content-Length check to 4.0 and you should be set.
Is this something I can do myself? I would happily do so if possible?
AOLserver
Not to my knoweldge, but run SPIKE on it and find out...
./closed_source_web_server_fuzz is what I used to find it...
-dave
Michael A. Cleverly wrote:
On Mon, 24 Nov 2003, Dave Aitel wrote:
It's not an unknown reason, it's a remote root which you guys already
fixed in 3.4...add the
On 2003.11.24, Dave Aitel [EMAIL PROTECTED] wrote:
AOLServer usually has a great reputation for security, but the 4.0
release didn't get a SPIKE run over it until recently, I suspect.
Nice plug, Dave. :-) I do agree, periodically running things like
SPIKE on AOLserver is probably a good idea
14 matches
Mail list logo
