Re: Loopback and multi-homed routing flaw in TCP/IP stack.

[MaD dUCK <madduck () MADDUCK NET>]

also sprach Kyle Sparger (on Mon, 05 Mar 2001 06:03:04PM -0500):
> This information is incorrect;  Linux does 'suffer' from this in at least
> version 2.2.  I believe it also 'suffers' from this in 2.4.  It's easy
> enough to replicate.  For example, on ethernet, just assign a static
> MAC address for the IP in question for the server in question, and you'll
> get access to the appropriate interface.

2.2 is vulnerable, but 2.4 is not. as far as i can tell, 2.4 systems
don't even have a localhost routing entry anymore.

martin

[greetings from the heart of the sun]# echo madduck@!#:1:s@\@@@.net
--
your fly might be open (but don't check it just now).