On 16 Jan 2003, Andrew Bartlett <[EMAIL PROTECTED]> wrote:

> Win2k has a bug (feature?) where there is a connection reset if there is
> a second connection from the SAME IP, before the first
> session-setup.  

So an unprivileged process on the client can cause a local denial of
service just by repeatedly half-opening connections?

> Both races need to be protected be separate mutexes.  The first should
> be protected in as generic a manner as possible, due to the fact that it
> is *any* connection from the IP.

Can the connection function be called by a nonprivileged process (say
rpcclient or smbclient) on the unix machine?  Is so we either need to
put the mutex somewhere world-writeable (gross) or just be willing to
take our chances without it.

-- 
Martin 

Reply via email to