[Full-Disclosure] Core Internet Vulnerable - News at 11:00
SturmM at honi.com
Tue Apr 20 20:37:53 BST 2004
NISCC has issued an advisory:
SANS has some good info too:
From: full-disclosure-admin at lists.netsys.com
[mailto:full-disclosure-admin at lists.netsys.com]On Behalf Of Crist J.
Sent: Tuesday, April 20, 2004 12:28 PM
To: full-disclosure at lists.netsys.com
Subject: [Full-Disclosure] Core Internet Vulnerable - News at 11:00
Does anyone know WTF they are trying to say in this AP article,
"Core Internet Technology Is Vulnerable,"
It sounds like they are talking about a sequence number guessing
attack on TCP BGP sessions? Sequence number prediction isn't really
a new attack, but the story says,
"Experts previously maintained such attacks could take between
four years and 142 years to succeed because they require guessing
a rotating number from roughly 4 billion possible combinations.
Watson said he can guess the proper number with as few as four
attempts, which can be accomplished within seconds."
Hmmm... Four attempts... And the story makes it sound like a
cross-platform attack, not a bug in a particular OS's ISN generation.
FUD or is there something here?
Crist J. Clark | cjclark at alum.mit.edu
| cjclark at jhu.edu
http://people.freebsd.org/~cjc/ | cjc at freebsd.org
Full-Disclosure - We believe in it.
Full-Disclosure is hosted and sponsored by Secunia.