[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: A new TCP/IP blind data injection technique?

To: Michal Zalewski <lcamtuf@ghettot.org>
Subject: Re: A new TCP/IP blind data injection technique?
From: Kris Kennaway <kris@FreeBSD.org>
Date: Wed, 10 Dec 2003 15:59:33 -0800

On Thu, Dec 11, 2003 at 12:28:28AM +0100, Michal Zalewski wrote:

>   2. Random IP ID numbers, a feature of some systems (OpenBSD?), although also
>      risky (increasing reassembly collission probability), make the attack
>      more difficult.

FreeBSD also has the option of randomizing the IP ID.

Kris

Follow-Ups:
- Re: A new TCP/IP blind data injection technique?
  - From: Casper Dik <casper@holland.sun.com>

References:
- A new TCP/IP blind data injection technique?
  - From: Michal Zalewski <lcamtuf@ghettot.org>

Prev by Date: [CORE-2003-12-05] DCE RPC Vulnerabilities New Attack Vectors Analysis
Next by Date: Re: Internet Explorer URL parsing vulnerability
Previous by thread: Breaking the checksum (a new TCP/IP blind data injection technique)
Next by thread: Re: A new TCP/IP blind data injection technique?
Index(es):
- Date
- Thread