Re: low bandwidth DoS attack against TCP/IP stack

[Jorrit Kronjee <full-disclosure () nospam wafel org>]

redb0ne () hush com wrote:
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
>
>
> > There's been some buzz about a new bug within the TCP/IP-protocol.
> > According to the people who discovered it, it affects some if not
> > all
> > OSes. They explain it a little bit in an interview (URL below)
> > without
> > telling any details.
>
> Fyodor released some speculation earlier today:
>
> http://insecure.org/stf/tcp-dos-attack-explained.html

And Robert E. Lee posted on his blog that Fyodor's explanation doesn't 
actually describe the bug they found.

http://blog.robertlee.name/2008/10/conjecture-speculation.html

Kind regards,

Jorrit

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/