[lkml]   [1999]   [Sep]   [26]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
Messages in this thread
SubjectRe: Linux 2.2.x ISN Vulnerability

> With the typo-bug fixed, the random part of the secret would be unknown.
> So in the bug-free case (aka pre-2.2.13/2.3.18ac8), the attacker can't
> know the whole secret,

It can. Reread the report.

The bug was that remote destination was ignored in calculating
seqno, so that all the destinations shared one secret.


To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to
Please read the FAQ at

 \ /
  Last update: 2005-03-22 13:54    [W:0.039 / U:3.172 seconds]
©2003-2018 Jasper Spaans|hosted at Digital Ocean and TransIP|Read the blog|Advertise on this site