Re: tcp,guardent,bellovin

[Rafi Sadowsky <rafi-nanog () meron openu ac il>]

On Mon, 12 Mar 2001, Steven M. Bellovin wrote:

> In message <Pine.GSO.4.31.0103121911520.9269-100000 () meron openu ac il>, Rafi Sa
> dowsky writes:
> > Hi
> >
> > Is there anything actually new in this exploit compared to the known TCP
> > hijacking vulnerabilities as portrayed say in Phrack 50(Juggernaut) ?
>
> Juggernaut requires eavesdropping; this one doesn't.

 No eavesdropping at all ? how can a TCP connection be hijacked if you're
not on the connection path?
(Or capable of diverting the connection past you -
 breaking routers/source_routing/<whatever>.... )

>               --Steve Bellovin, http://www.research.att.com/~smb
Thanks
        Rafi

>