Mailing-List: contact dev-help@community.apache.org; run by ezmlm
Precedence: bulk
Reply-To: dev@community.apache.org
MIME-Version: 1.0
In-Reply-To: <31AB1BB0CC26394A97147E6FD09B58EAB32F29A2@szxema508-mbs.china.huawei.com>
References: <31AB1BB0CC26394A97147E6FD09B58EAB32F29A2@szxema508-mbs.china.huawei.com>
From: Flavio P JUNQUEIRA <fpj@apache.org>
Date: Thu, 27 Oct 2016 20:45:58 +0100
Message-ID: <CAB5oV2-GNWkGW9ptR6-5ACAR7DrP-JvREncSBa1Jv46TXBCORA@mail.gmail.com>
Subject: Re: Dear Community,we find a Vulnerability in Zookeeper/SOLR/Apache(PHP)
 about tcp connection exhausted,Waiting for your reply
To: Zookeeper <dev@zookeeper.apache.org>
Cc: Xionglongsheng <xionglongsheng@huawei.com>,
	"dev@lucene.apache.org" <dev@lucene.apache.org>, Shifeiye <shifeiye@huawei.com>,
	Shuzhihui <shuzhihui@huawei.com>, Liubeijia <liubeijia@huawei.com>,
	"dev@community.apache.org" <dev@community.apache.org>, Chenchu <chenchu@huawei.com>
Content-Type: multipart/alternative; boundary=94eb2c09d8e0a7f397053fddfd61
archived-at: Thu, 27 Oct 2016 19:46:03 -0000

--94eb2c09d8e0a7f397053fddfd61
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable

Please read this:

http://zookeeper.apache.org/security.html

-Flavio

On 27 Oct 2016 20:16, "Linkezhang" <linkezhang@huawei.com> wrote:

> *Problem:*
>
> In the client using some method (such as telnet) to establish a tcp
> connection with server-side apache listening port , but after the
> establishment of tcp connection, the client does not send any data.
> However, apache will not disconnect this tcp connection, may lead to the
> number of connections exhausted , Resulting in DOS
>
>
>
> *The attack process**=EF=BC=9A*
> 1. The client executes the telnet service port
>
> [image: cid:image001.png@01D23070.DA903540]
> Start the client telnet server port 60000, do not exit for a long time:
>
> Excuting an order:
> telnet 172.22.17.26 60000
>
>
>

--94eb2c09d8e0a7f397053fddfd61--