Messages in this thread | | | Subject | Re: Linux 2.4.27 SECURITY BUG - TCP Local and REMOTE(verified) Denial of Service Attack | From | Florian Weimer <> | Date | Tue, 21 Sep 2004 00:03:18 +0200 |
| |
* Alan Cox:
> On Maw, 2004-09-14 at 15:55, Paul Jakma wrote: >> Hmm, yes, I hadnt thought of the attack-mitigating aspects of >> graceful restart. Though, without other measures, the session is >> still is open to abuse (send RST every second). > > Its more than that given port randomization, quite a lot more. Of course > its much easier to just send "must fragment, size 68" icmp replies and > guess them that way.
Is this attack documented anywhere? - To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to majordomo@vger.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html Please read the FAQ at http://www.tux.org/lkml/
| |