Description
RSniff 1.0 allows remote attackers to cause a denial of service (connection exhaustion) via a large number of connections with a command other than AUTHENTICATE, or without any data, which prevents the socket from being closed properly.
References
- http://aluigi.altervista.org/adv/rsniff-adv.txt
- 11339 third-party-advisory
- 10093 vdb-entry
- 20040409 DoS in Rsniff 1.0 mailing-list
- rsniff-connection-dos(15823) vdb-entry