Re: TCP Sequence Prediction

[Dean () PUTNAMCOMPANY COM (Dean Michael Dorman)]

the boxes were sp5'ed but thanks to a couple of subscribers they are now
hotfixed.  BTW I don't choose to have NT as my exposed OS to the net but my
CIO does.  hands tied and all.

-----Original Message-----
From: Maxime Rousseau [mailto:mrousseau () SECURED ORG]
Sent: Thursday, March 30, 2000 2:05 PM
To: VULN-DEV () SECURITYFOCUS COM
Subject: Re: TCP Sequence Prediction

I belive SP6a fixes the TCP sequence prediction issues. if not i am certain
there is a hotfix for it. In fact, if i remember correctly, the whole SP6 vs
SP6a deal was about this hotfix not being in... Someone correct me if i am
wrong here :)

What SP were those NT boxes at?

M.
Secured Industries
Why fear the unknown?

-----Original Message-----
From: VULN-DEV List [mailto:VULN-DEV () securityfocus com]On Behalf Of Dean
Michael Dorman
Sent: Wednesday, March 29, 2000 1:17 PM
To: VULN-DEV () securityfocus com
Subject: TCP Sequence Prediction

Pardon me if this is a trivial question but after nmapping several servers I
find that NT boxen usually come up with:

TCP Sequence Prediction: Class=trivial time dependency
                         Difficulty=6 (Trivial joke)

I was wondering how to increase the security here (besides removing NT and
installing OpenBSD).

_____________________________________
Dean Michael Dorman, Information Systems
Putnam Company, Wellsboro, PA  16901
-------------------------------------------------------------
Challenge the integrity of your information.
-------------------------------------------------------------