Vulnerability Development mailing list archives
R: New DoS attack
From: raist () CTRADE IT (Raistlin)
Date: Thu, 15 Jun 2000 13:47:50 +0200
I saw a new ugly type of DoS attack this weekend.
[mail goes on describing an attack performed using "Unreal Tournament" game servers as amplifiers] It's nothing near new I fear. "Quake FLOOD" is out in the wild since Quake appeared on the game scene, which was no more than 2 years ago, 3 perhaps. Problem is, connection request to a game server causes huge amounts of data to be generated and sent without check on a UDP (connectionless, then) transmission. Understanding that UDP is faster and necessary for game programmers, still I can't understand the lack of security. A simple "3-way handshaking" roughly reproduced by UDP method would stop all of this, right ? Just my .02 EUR (which is a little less than .02$ I fear) Stefano "Raistlin" Zanero System Administrator Gilda dei Giocatori in Rete public PGP key block at http://gioco.net/pgpkeys
Current thread:
- R: New DoS attack Raistlin (Jun 15)
- Re: R: New DoS attack Bluefish (Jun 17)
- Re: New DoS attack Mikael Olsson (Jun 18)
- R: R: New DoS attack Raistlin (Jun 20)
- Re: R: R: New DoS attack Bluefish (Jun 21)
- Re: R: New DoS attack Bluefish (Jun 17)