Security Basics mailing list archives
Re: Attacking a machine on network.
From: Paul Sebastian Ziegler <psz () observed de>
Date: Wed, 30 May 2007 01:10:17 +0200
If someone doesn't run a service, this obviously leads me to the assumption that that particular machine could never be cracked ? Is this a right assumption ?
Not really. Some attacks actually target the drivers of the network-interfaces. For example the WLAN drivers on MacOS X and some versions of Madwifi had issues. Since those drivers listen to the traffic anyway, it might be possible to trigger some sort of overflow without a single listening port. Also information leakage may occur no matter if the box is running any ports itself. Furthermore there are other techniques to communicate with boxes than just ports. Look up "portknocking" for that. My two cents Paul
Current thread:
- Attacking a machine on network. John Pluffum (May 29)
- Re: Attacking a machine on network. Jason Ross (May 29)
- Re: Attacking a machine on network. Paul Sebastian Ziegler (May 30)
- Re: Attacking a machine on network. John Pluffum (May 30)
- RE: Attacking a machine on network. Mark Brunner (May 30)
- Re: Attacking a machine on network. Ryan Chow (May 30)
- RE: Attacking a machine on network. Murda Mcloud (May 30)
- Re: Attacking a machine on network. John Pluffum (May 30)
- Re: Attacking a machine on network. Alexander Klimov (May 30)
- <Possible follow-ups>
- Re: Re: Attacking a machine on network. sandeep . sandhu . in (May 30)
- Re: Re: Attacking a machine on network. savagemp5 (May 31)