[tpop3d-discuss]Tpop3d w/ssl crashes after Portscan

Martin Schmitt mas at scsy.de
Sun, 15 Feb 2004 10:57:08 +0100


Hey, it's me again! ;-)

Another new observation: I can bring tpop3d down by connecting to the pop3s
port and then killing the connection. An nmap TCP scan or simple telnet to
port 995 will do.

Feb 15 10:44:00 vortex tpop3d[11913]: [ID 702911 local0.error] quit: signal 11 post_fork = 0

Again, this is Solaris 8 with OpenSSL 0.9.6c. I can't believe that this
would-be-DoS hasn't been seen before, so I must be missing something in the
configuration or elsewhere.

Here's the relevant line from the config. 

listen-address:  1.2.3.4 1.2.3.4;tls=immediate,/etc/blah/cert.pem,/etc/blah/key.pem

Any ideas? 

-martin




-- 
+-------------------------+------------------------+
| Martin Schmitt          | Schmitt Systemberatung |
| http://www.scsy.de/~mas | http://www.scsy.de     |
+-------------------------+------------------------+