You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@directory.apache.org by "Emmanuel Lecharny (JIRA)" <ji...@apache.org> on 2008/09/17 11:43:44 UTC
[jira] Created: (DIRSERVER-1260) Add a protection agains DoS
attacks
Add a protection agains DoS attacks
-----------------------------------
Key: DIRSERVER-1260
URL: https://issues.apache.org/jira/browse/DIRSERVER-1260
Project: Directory ApacheDS
Issue Type: New Feature
Affects Versions: 1.5.4
Reporter: Emmanuel Lecharny
Fix For: 1.5.5
A malicious user can send hand crafted PDUs which can break the server in OOM errors. Another kind of attack would be to send big images, leading to OOM too.
We must implement some protection against such DoS attacks (which may not be malicious).
--
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.
[jira] Resolved: (DIRSERVER-1260) Add a protection agains DoS
attacks
Posted by "Emmanuel Lecharny (JIRA)" <ji...@apache.org>.
[ https://issues.apache.org/jira/browse/DIRSERVER-1260?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
Emmanuel Lecharny resolved DIRSERVER-1260.
------------------------------------------
Resolution: Fixed
Fixed. A new parameter has been added into the server.xml file (maxPDUSize) for the DirectoryService bean.
http://svn.apache.org/viewvc?rev=722452&view=rev
> Add a protection agains DoS attacks
> -----------------------------------
>
> Key: DIRSERVER-1260
> URL: https://issues.apache.org/jira/browse/DIRSERVER-1260
> Project: Directory ApacheDS
> Issue Type: New Feature
> Affects Versions: 1.5.4
> Reporter: Emmanuel Lecharny
> Assignee: Emmanuel Lecharny
> Fix For: 1.5.5
>
>
> A malicious user can send hand crafted PDUs which can break the server in OOM errors. Another kind of attack would be to send big images, leading to OOM too.
> We must implement some protection against such DoS attacks (which may not be malicious).
--
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.
[jira] Closed: (DIRSERVER-1260) Add a protection agains DoS attacks
Posted by "Emmanuel Lecharny (JIRA)" <ji...@apache.org>.
[ https://issues.apache.org/jira/browse/DIRSERVER-1260?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
Emmanuel Lecharny closed DIRSERVER-1260.
----------------------------------------
> Add a protection agains DoS attacks
> -----------------------------------
>
> Key: DIRSERVER-1260
> URL: https://issues.apache.org/jira/browse/DIRSERVER-1260
> Project: Directory ApacheDS
> Issue Type: New Feature
> Affects Versions: 1.5.4
> Reporter: Emmanuel Lecharny
> Assignee: Emmanuel Lecharny
> Fix For: 1.5.5
>
>
> A malicious user can send hand crafted PDUs which can break the server in OOM errors. Another kind of attack would be to send big images, leading to OOM too.
> We must implement some protection against such DoS attacks (which may not be malicious).
--
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.
[jira] Assigned: (DIRSERVER-1260) Add a protection agains DoS
attacks
Posted by "Emmanuel Lecharny (JIRA)" <ji...@apache.org>.
[ https://issues.apache.org/jira/browse/DIRSERVER-1260?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
Emmanuel Lecharny reassigned DIRSERVER-1260:
--------------------------------------------
Assignee: Emmanuel Lecharny
> Add a protection agains DoS attacks
> -----------------------------------
>
> Key: DIRSERVER-1260
> URL: https://issues.apache.org/jira/browse/DIRSERVER-1260
> Project: Directory ApacheDS
> Issue Type: New Feature
> Affects Versions: 1.5.4
> Reporter: Emmanuel Lecharny
> Assignee: Emmanuel Lecharny
> Fix For: 1.5.5
>
>
> A malicious user can send hand crafted PDUs which can break the server in OOM errors. Another kind of attack would be to send big images, leading to OOM too.
> We must implement some protection against such DoS attacks (which may not be malicious).
--
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.
[jira] Commented: (DIRSERVER-1260) Add a protection agains DoS
attacks
Posted by "Emmanuel Lecharny (JIRA)" <ji...@apache.org>.
[ https://issues.apache.org/jira/browse/DIRSERVER-1260?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=12652207#action_12652207 ]
Emmanuel Lecharny commented on DIRSERVER-1260:
----------------------------------------------
Committed some code to handle this limitation (not activated yet, I still have to add some test for it) :
http://svn.apache.org/viewvc?rev=722296&view=rev
and
http://svn.apache.org/viewvc?rev=722297&view=rev
> Add a protection agains DoS attacks
> -----------------------------------
>
> Key: DIRSERVER-1260
> URL: https://issues.apache.org/jira/browse/DIRSERVER-1260
> Project: Directory ApacheDS
> Issue Type: New Feature
> Affects Versions: 1.5.4
> Reporter: Emmanuel Lecharny
> Fix For: 1.5.5
>
>
> A malicious user can send hand crafted PDUs which can break the server in OOM errors. Another kind of attack would be to send big images, leading to OOM too.
> We must implement some protection against such DoS attacks (which may not be malicious).
--
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.
[jira] Updated: (DIRSERVER-1260) Add a protection agains DoS
attacks
Posted by "Emmanuel Lecharny (JIRA)" <ji...@apache.org>.
[ https://issues.apache.org/jira/browse/DIRSERVER-1260?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
Emmanuel Lecharny updated DIRSERVER-1260:
-----------------------------------------
One idea would be to limit the incoming PDU size to a certain size. If it exceeds this size, then the connection is closed, and the PDU is discarded. This size will be configurable, and be a part of the server.xml file.
> Add a protection agains DoS attacks
> -----------------------------------
>
> Key: DIRSERVER-1260
> URL: https://issues.apache.org/jira/browse/DIRSERVER-1260
> Project: Directory ApacheDS
> Issue Type: New Feature
> Affects Versions: 1.5.4
> Reporter: Emmanuel Lecharny
> Fix For: 1.5.5
>
>
> A malicious user can send hand crafted PDUs which can break the server in OOM errors. Another kind of attack would be to send big images, leading to OOM too.
> We must implement some protection against such DoS attacks (which may not be malicious).
--
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.