Full Disclosure mailing list archives
RE: Core Internet Vulnerable - News at 11:00
From: SturmM <SturmM () honi com>
Date: Tue, 20 Apr 2004 14:37:53 -0500
NISCC has issued an advisory: http://www.uniras.gov.uk/vuls/2004/236929/index.htm SANS has some good info too: http://isc.sans.org/diary.php?date=2004-04-20 Mark -----Original Message----- From: full-disclosure-admin () lists netsys com [mailto:full-disclosure-admin () lists netsys com]On Behalf Of Crist J. Clark Sent: Tuesday, April 20, 2004 12:28 PM To: full-disclosure () lists netsys com Subject: [Full-disclosure] Core Internet Vulnerable - News at 11:00 Does anyone know WTF they are trying to say in this AP article, "Core Internet Technology Is Vulnerable," http://story.news.yahoo.com/news?tmpl=story&cid=562&ncid=738&e=1&u=/ap/20040 420/ap_on_hi_te/internet_threat It sounds like they are talking about a sequence number guessing attack on TCP BGP sessions? Sequence number prediction isn't really a new attack, but the story says, "Experts previously maintained such attacks could take between four years and 142 years to succeed because they require guessing a rotating number from roughly 4 billion possible combinations. Watson said he can guess the proper number with as few as four attempts, which can be accomplished within seconds." Hmmm... Four attempts... And the story makes it sound like a cross-platform attack, not a bug in a particular OS's ISN generation. FUD or is there something here? -- Crist J. Clark | cjclark () alum mit edu | cjclark () jhu edu http://people.freebsd.org/~cjc/ | cjc () freebsd org _______________________________________________ Full-Disclosure - We believe in it. Charter: http://lists.netsys.com/full-disclosure-charter.html _______________________________________________ Full-Disclosure - We believe in it. Charter: http://lists.netsys.com/full-disclosure-charter.html
Current thread:
- RE: Core Internet Vulnerable - News at 11:00, (continued)
- RE: Core Internet Vulnerable - News at 11:00 Jade E. Deane (Apr 20)
- Re: Core Internet Vulnerable - News at 11:00 Alexander Bochmann (Apr 21)
- Re: Core Internet Vulnerable - News at 11:00 Pavel Kankovsky (Apr 20)
- Re: Core Internet Vulnerable - News at 11:00 Exibar (Apr 20)
- Re: Core Internet Vulnerable - News at 11:00 james (Apr 20)
- Re: Core Internet Vulnerable - News at 11:00 Michael Schaefer (Apr 20)
- NISCC Vulnerability Advisory 236929: Vulnerability Issues in TCP (was Re: [Full-Disclosure] Core Internet Vulnerable - News at 11:00) Chris McCulloh (Apr 20)
- Re: Core Internet Vulnerable - News at 11:00 Gregory A. Gilliss (Apr 20)
- RE: Core Internet Vulnerable - News at 11:00 David Vincent (Apr 20)
- RE: Core Internet Vulnerable - News at 11:00 Compton, Rich (Apr 20)
- RE: Core Internet Vulnerable - News at 11:00 SturmM (Apr 20)
- RE: Core Internet Vulnerable - News at 11:00 Jos Osborne (Apr 21)