Re: TCP Resource Exhaustion Attacks

[Ron <ron () skullsecurity net>]

Fyodor wrote:
> It is only peripherally related to Nmap, but there was a lot of news
> yesterday regarding vaguely described attacks on TCP services.  The
> research was done by the UnicornScan folks.  I've speculated on the
> details and implications here:
>
> http://insecure.org/stf/tcp-dos-attack-explained.html
>
> Cheers,
> -F

For anybody who isn't paying attention (like me, till just now), Robert 
E. Lee replied to Fyodor's post, saying that, while he makes good 
points, he isn't spot on:

http://blog.robertlee.name/2008/10/conjecture-speculation.html

Fyodor's was a good read anyways, though -- I especially like the part 
about the recent spate of people announcing (supposedly) massive 
vulnerabilities. It IS getting pretty tiresome, as if there isn't enough 
FUD being spread around these days! :)

Ron

_______________________________________________
Sent through the nmap-dev mailing list
http://cgi.insecure.org/mailman/listinfo/nmap-dev
Archived at http://SecLists.Org