Bugtraq mailing list archives

Re: your mail

From: chuegen () QUADRUNNER COM (Craig A. Huegen)
Date: Mon, 21 Dec 1998 14:00:40 -0800


It should be pointed out here that ICMP redirects are not the only
kinds of attacks which can be carried out against these devices.

Our wonderful denial of service friends land, nestea, nestea2, et al,
can wreak havoc on these devices as well.

Your best bet as a user of these devices is to impose very restrictive
filters, or insure that these systems are not vulnerable to all
of the attacks against IP stacks that have been discovered.

I made a joke in my talk at SANS '98 that when my toaster got attacked
by nestea, it burnt my toast.  We're not too far off from that. =)

/cah

On Mon, Dec 21, 1998 at 01:02:46PM -0500, X-Force wrote:
==>ISS Security Advisory
==>December 10, 1998
==>
==>ICMP Redirects Against Embedded Controllers

Current thread:

Re: FTP.SODRE.NET Hacked... Eggdrop Modified.., (continued)
- - - Re: FTP.SODRE.NET Hacked... Eggdrop Modified.. Matt Hallacy (Dec 19)
  - ip header id patched. awgn () COSMOS IT (Dec 19)
  - ValueClick Ellen (Dec 19)
- Re: OSS nice tmp race Pavel Kankovsky (Dec 18)
  - Re: OSS nice tmp race Dr. Mudge (Dec 18)
- Re: OSS nice tmp race Joel Eriksson (Dec 18)
- OSS nice tmp race the razor of love (Dec 18)
- Re: OSS nice tmp race Crispin Cowan (Dec 20)
- Re: OSS nice tmp race X-Force (Dec 21)
  - AOL client uses IP tunneling Aviram Jenik (Dec 21)
  - Re: your mail Craig A. Huegen (Dec 21)
    - Re: your mail Alan Cox (Dec 22)