[lkml]   [2004]   [Jun]   [28]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
Messages in this thread
SubjectRe: TCP-RST Vulnerability - Doubt
At 01:05 AM 27/06/2004, David S. Miller wrote:
> > Could you kindly share your views regarding what Linux has done to its
> stack
> > to overcome this vulnerability as it will be of great help to my research.
>We have done nothing, and there are no plans to implement any workaround
>for this problem.

the vulnerabilities are real for any application/protocol which makes use
of long-duration TCP sessions.

the most common place that people have found the vulnerability to be of use
is in killing BGP sessions.
protocols which make use of long-held TCP sessions such as NFSv3, irc,
nntp, telnet, ssh, X11 et al are just as vulnerable.



To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to
More majordomo info at
Please read the FAQ at

 \ /
  Last update: 2005-03-22 14:04    [W:0.098 / U:4.292 seconds]
©2003-2018 Jasper Spaans|hosted at Digital Ocean and TransIP|Read the blog|Advertise on this site