Reliable Scalable Cluster Technology contains a flaw that may allow a local denial of service. The issue is triggered when an malicious user repeatedly specifies an arbitrary file as argument to the -f command line option filling the file system with 65,535 byte files, and will result in loss of availability for the server.

Currently, there are no known upgrades or patches to correct this issue. It is possible to correct the flaw by implementing the following workarounds:
1.) Remove the setuid bit from ctstrtcasd using:
chmod 555 /usr/sbin/rsct/bin/ctstrtcasd
2.) Only allow trusted users local access to security critical systems

• Security Tracker: 1011429
• Secunia Advisory ID: 12664
• CVE ID: 2004-0828 (see also: NVD)
• Other Advisory URL: http://www.idefense.com/application/poi/display?id=144&type=vulnerabilities

• iDefense Labs - iDefense Labs