>Are you certain? I don't have any first-hand knowledge with BO2K (haven't
>dl-ed it yet), but this is from the ISS Security Alert on BO2K:
I don't yet, either. My comment is based on what Dildog said in
the presentation. (I was in the audience, so I could actually hear it..
I understand the "webcast" of it was a bit spotty.)
>And nowhere did it mention communications over ICMP. From my limited
>knowledge of how ICMP works, wouldn't BO2K have to modify the NT IP stack to
>use ICMP, since it isn't port based? Does it do that?
No, you just need to be able to write the equivalent of a sniffer and raw
packet generator, which Dildog has done before.
Ryan
-
[To unsubscribe, send mail to [EMAIL PROTECTED] with
"unsubscribe firewalls" in the body of the message.]
