Bug 46699

Description of Problem:
The problem is another box (Lucent) is using TFTP to download code to the 
CPU's.  The first TFTP request is successful when the PROM request code, 
the CPU is then loaded and the TFTP server is then hit again with multiple 
request for multiple files (8 total).  Problem the request's for file are 
simultaneous, which the TFTP server begins to fill the first request, the 
second and following are denied and the TFTP server graceful shuts down 
due to a suspect LOOPING from the SERVER.  Technically it is NOT, just 
being hit with multiple request.  I believe the programmer simply place a 
security option here, to prevent denial of service attack which should be 
commended, but unfortunately the Lucent box issues multiple requests at 
once.

I downloaded a PC version (shareware) TFTP for testing making sure the 
TFTP and Lucent would work fine.  It did, however, it to showed multiple 
requests at one time.  However, PC programmers are not really in tune with 
DOS attacks and would NOT check for that possibility which the Lucent box 
is able to re-request the files and load fine.

Is there an option for turning this feature off (assuming my assumption is 
right)?  If my assumption is wrong, then there is a bug in the TFTP server 
that fails after multiple request from the same host.

We need to get this elevated to be worked on as a bug or for a solution.  
Please call me at (202) 530-3507 and let me know the status.


How Reproducible:
VERY! Every time we need to load the CPU's from the LUCENT Box.

Steps to Reproduce:
1. Startup INETD with TFTP
2. Force Lucent reboot
3. Loads one file, CPU reboots and then causes the TFTP to shut down.

Actual Results:
TFTP works with one, file fine, but fails after receving multiple requests 
at once.

Expected Results:
TFTP should remain up and acknowledging the requests.

Additional Information:
Running RedHat Linux 7.0 with the upgrade TFTP server version 0.17-12 
gotten from ftp://people.redhat.com/hdeller