New submission from Giampaolo Rodola' <g.rod...@gmail.com>:
Steps to reproduce the issue:
- in one shell run: "python -m smtpd -n"
- in another one run: "for i in {1..1000};do nmap -sT -p 8025 localhost;done"
The server will print out the following output and just quit (DoS):
giampa...@ubuntu:~/svn/python-2.7$ ./python -m smtpd -n
error: uncaptured python exception, closing channel <__main__.PureProxy
listening localhost:8025 at 0xb74b0f4c> (<class 'socket.error'>:[Errno 107]
Transport endpoint is not connected
[/home/giampaolo/svn/python-2.7/Lib/asyncore.py|read|79]
[/home/giampaolo/svn/python-2.7/Lib/asyncore.py|handle_read_event|430]
[/home/giampaolo/svn/python-2.7/Lib/smtpd.py|handle_accept|296]
[/home/giampaolo/svn/python-2.7/Lib/smtpd.py|__init__|124]
[/home/giampaolo/svn/python-2.7/Lib/socket.py|meth|222])
giampa...@ubuntu:~/svn/python-2.7$
This is due to issue 6706.
----------
components: Library (Lib)
messages: 109003
nosy: giampaolo.rodola
priority: normal
severity: normal
status: open
title: DoS smtpd module vulnerability
type: security
versions: Python 2.6, Python 2.7, Python 3.1, Python 3.2
_______________________________________
Python tracker <rep...@bugs.python.org>
<http://bugs.python.org/issue9129>
_______________________________________
_______________________________________________
Python-bugs-list mailing list
Unsubscribe:
http://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com
