Re: Using nmap portscan against Solaris 9 with Netbackup 6 causes problems

[Brandon Enright <bmenrigh () ucsd edu>]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On Tue, 19 Feb 2008 19:21:18 +0100
"COMTE Guillaume" <herodote.comte () gmail com> wrote:

> Any clue , or guidelines to solve this problems ?
>
> I think that it's a solaris bug, so far, i will DDOS all netbackup
> running with nmap, i can believe that...
>
> Thks
> Guillaume

We get this sort of problem all the time.  We have several Solaris
boxes that crash on OS fingerprint probes.  We also take down printers,
NAS boxes, and other "enterprise" level crap.

This isn't a problem with Nmap per-se, it is a bug in the
hardware/software being scanned.

You best bet is to not use -O (or -A) when scanning these boxes.  There
is a good chance that a "normal" port scan won't take them down.

Also consider that if it is that easy for you to take "critical"
infrastructure down, think of how easy you can be DoS'd by anyone that
can send packets at these boxes.

Brandon


-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.7 (GNU/Linux)

iD8DBQFHuyPUqaGPzAsl94IRAvdAAJ9zJSGSADwWSScpWtp6//PgIYqw7wCdFv4p
BnICPd7WzN8iEbKm+5Xfsts=
=BxSz
-----END PGP SIGNATURE-----

_______________________________________________
Sent through the nmap-dev mailing list
http://cgi.insecure.org/mailman/listinfo/nmap-dev
Archived at http://SecLists.Org