Messages in this thread Patch in this message | | | From | kuznet@ms2 ... | Subject | Re: Linux 2.2.x ISN Vulnerability | Date | Sun, 26 Sep 1999 21:42:10 +0400 (MSK DST) |
| |
Hello!
> 16:23:02.727540 attacker.522 > victim.ssh : S 446679473: 446679473(0) > 16:23:02.728371 victim.ssh > attacker.522: S 3929852318:3929852318(0) > 16:23:02.734448 11.11.11.11.522 > victim.ssh: S 446679473: 446679473(0) > 16:23:02.734599 victim.ssh > 11.11.11.11.522: S 3929859164:3929859164(0)
Damn!
Alexey
--- ../orig/linux/net/ipv4/tcp_ipv4.c Thu Aug 12 17:51:37 1999 +++ linux/net/ipv4/tcp_ipv4.c Sun Sep 26 21:38:07 1999 @@ -525,7 +525,8 @@ static inline __u32 tcp_v4_init_sequence(struct sock *sk, struct sk_buff *skb) { - return secure_tcp_sequence_number(sk->saddr, sk->daddr, + return secure_tcp_sequence_number(skb->nh.iph->daddr, + skb->nh.iph->saddr, skb->h.th->dest, skb->h.th->source); } - To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to majordomo@vger.rutgers.edu Please read the FAQ at http://www.tux.org/lkml/
| |