Bugtraq mailing list archives

Re: CERT Advisory CA-97.28 - Teardrop_Land

From: mycroft () MIT EDU (Charles M. Hannum)
Date: Tue, 16 Dec 1997 15:12:18 -0500


Aleph One <aleph1 () DFW NET> writes:


The NetBSD Project
==================

Topic 2 - Land

No feedback.


Versions prior to 1.3_BETA will hang.  1.3_BETA and later versions are
not vulnerable.

Red Hat Software
================

Topic 1 - Teardrop

Linux is not vulnerable.


It's well known that versions of Linux prior to publishing of the
teardrop attack *were* vulnerable.  The above borders on an outright
lie.

Current thread:

CERT Advisory CA-97.28 - Teardrop_Land Aleph One (Dec 16)
- <Possible follow-ups>
- Re: CERT Advisory CA-97.28 - Teardrop_Land Charles M. Hannum (Dec 16)
  - Re: CERT Advisory CA-97.28 - Teardrop_Land Alan Cox (Dec 16)
    - Re: CERT Advisory CA-97.28 - Teardrop_Land Ron Holt (Dec 19)
  - SGI Security Advisory 19971201-01-P1391 - statd(1M) Buffer Overrun SGI Security Coordinator (Dec 16)
  - CERT Vendor-Initiated Bulletin VB-97.16 - CrackLib Aleph One (Dec 17)
  - SNI-22: RADIUS Advisory Secure Networks Inc. (Dec 17)
    - Re: SNI-22: RADIUS Advisory miguel a.l. paraz (Dec 17)
    - CGI security hole in EWS (Excite for Web Servers) Marc Merlin (Dec 17)
    - Re: CGI security hole in EWS (Excite for Web Servers) carson () tla org (Dec 18)
    - Re: SNI-22: RADIUS Advisory Thom Henderson (Dec 18)
    - mIRC Worm Aleph One (Dec 18)

(Thread continues...)