COMMAND
kernel
SYSTEMS AFFECTED
Debian 2.2.10 Kernel
PROBLEM
Dimuthu Parussalla found following. There is a buffer overflow
hang in linux debian distributin kernel 2.2.10 with ipchains
1.3.8, 27-Oct-1998. He tested with a linux running with debian
above version of kernel and ipchains. First we setup the linux
box to handle IP Masquerading as follows.
ipchains -A forward -j MASQ -s 192.168.0.0/16
Then from a local workstation within the 192.168.0.0 network. We
ssh to the linux box and did the following
$ping -f <ip.address>
And we opend a another ssh session to the linux box and did the
following
$ping -l 6512121 <ip.address>
After a few minutes. Ipchains hangs and the linux server hangs..
SOLUTION
Ipchains-patch.gz will fix the problem.