Messages in this thread | | | Date | Tue, 29 Jun 2004 12:34:01 +1000 | From | Lincoln Dale <> | Subject | Re: TCP-RST Vulnerability - Doubt |
| |
At 01:05 AM 27/06/2004, David S. Miller wrote: > > Could you kindly share your views regarding what Linux has done to its > stack > > to overcome this vulnerability as it will be of great help to my research. > >We have done nothing, and there are no plans to implement any workaround >for this problem.
the vulnerabilities are real for any application/protocol which makes use of long-duration TCP sessions.
the most common place that people have found the vulnerability to be of use is in killing BGP sessions. protocols which make use of long-held TCP sessions such as NFSv3, irc, nntp, telnet, ssh, X11 et al are just as vulnerable.
cheers,
lincoln.
- To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to majordomo@vger.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html Please read the FAQ at http://www.tux.org/lkml/
| |