Package: netcat-traditional
Version: 1.10-40
Severity: normal

If netcat is used to connect to a closed local port, it may connect to itself.

How to reproduce:

1) Select a random port from the range which is used by clients
# sysctl net.ipv4.ip_local_port_range

2) Start netcat in loop with this port
# while true; do nc.traditional -v localhost 52804 < /dev/zero; done
localhost [127.0.0.1] 52804 (?) : Connection refused
localhost [127.0.0.1] 52804 (?) : Connection refused
[....]
localhost [127.0.0.1] 52804 (?) : Connection refused
localhost [127.0.0.1] 52804 (?) : Connection refused
localhost [127.0.0.1] 52804 (?) open

The new version netcat-openbsd has the same bug (Filled under #682444). It may 
be just 
coincidence, but it looks like that this version is less prone for this bug.

Greetings
Felix Rublack


-- System Information:
Debian Release: wheezy/sid
  APT prefers unstable
  APT policy: (500, 'unstable')
Architecture: amd64 (x86_64)

Kernel: Linux 3.4.5 (SMP w/4 CPU cores)
Locale: LANG=de_DE.UTF-8, LC_CTYPE=de_DE.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash

Versions of packages netcat-traditional depends on:
ii  libc6  2.13-35

netcat-traditional recommends no packages.

netcat-traditional suggests no packages.

-- no debconf information


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org

Reply via email to