Home page logo

bugtraq logo Bugtraq mailing list archives

Re: Advisory Update: ServerIron TCP/IP predictability fixed
From: hdm () SECUREAUSTIN COM (H D Moore)
Date: Tue, 14 Mar 2000 20:15:57 -0600


BeOS 4.0 also has a shoddy tcp/ip stack which increases the ISS by 1 per
connection.   This may been fixed by now, I haven't tested it in over a


Andrew van der Stock wrote:
The ISS is incremented by 1 for each connection, and is thus easily
spoofable and hijackable. The predictability exposes sideband information
about when the switch is being used by other (possibly legitimate) users.

The hosts behind the switch are NOT affected by this issue. The faked IP
addresses offer the predictability of the hosted platform (ie Linux 2.2.14
== good luck!, Win9x == trivial joke).

  By Date           By Thread  

Current thread:
[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]