Re: Port scan with nmap causes infinite loop in casDGClient::processDG() [Re: CA gatway runs away when zero length PV name in UDP search request]

["J. Lewis Muir" <jlmuir@imca-cat.org>]

On 01/23, Mark Engbretson wrote:
> For whatever it is worth, there are a large number of Ethernet devices
> that have to be manually reset at the APS when the network police run
> their various port scans - PLC systems, Area Detectors, Galil Ethernet
> motor controllers, whatever.

Hi, Mark.

Frankly, that's sad.

> Their docs also state clearly that such hardware is intended to
> be used on an isolated or protected network. I do not think that
> any software or hardware vendor is going to say their server
> implementations can 100% survive what is essentially a DOS attack.

A port scan is not a DOS attack.  Software that crashes due to receiving
an invalid packet has a DOS vulnerability because that vulnerability
could be used in a DOS attack.  Obviously, I understand that the
software is intended to be used on a trusted network, but crashing
because it receives an invalid packet is a bug and should be fixed.

Regards,

Lewis