Re: Linux Blind TCP Spoofing (fwd)

[jhardin () WOLFENET COM (John D. Hardin)]

---------- Forwarded message ----------
Date: Wed, 10 Mar 1999 19:46:13 +0000 (GMT)
From: Alan Cox <alan () lxorguk ukuu org uk>
To: jhardin () WOLFENET COM
Subject: Re: Linux Blind TCP Spoofing

> > It is recommended that kernels below version 2.0.36 be upgraded to
> > eliminate this vulnerability.
>
> This implies but does not explicitly state that 2.0.36+ kernels are
> not vulnerable. Is this the case?

NAI reported the problem to me during the 2.0.36 development period and
the bug was squashed.