Re: known TCP vulnerability ??

2005-02-12 Thread Garrett Wollman
On Fri, 11 Feb 2005 21:19:16 +0100, Andre Oppermann [EMAIL PROTECTED] said: Li, Qing wrote: Ran the packet tests against FreeBSD 5.3 and 6-CURRENT and both respond to the SYN+FIN packets with SYN+ACK. This is expected behaviour because of FreeBSD used to implement T/TCP according to

known TCP vulnerability ??

2005-02-11 Thread Li, Qing
http://www.kb.cert.org/vuls/id/464113 http://www.linuxsecurity.com/content/view/104980/98/ Ran the packet tests against FreeBSD 5.3 and 6-CURRENT and both respond to the SYN+FIN packets with SYN+ACK. Should I file a PR if there isn't one already

Re: known TCP vulnerability ??

2005-02-11 Thread Andre Oppermann
Li, Qing wrote: http://www.kb.cert.org/vuls/id/464113 http://www.linuxsecurity.com/content/view/104980/98/ Ran the packet tests against FreeBSD 5.3 and 6-CURRENT and both respond to the SYN+FIN packets with SYN+ACK. This is expected behaviour because of

Re: known TCP vulnerability ??

2005-02-11 Thread Don Lewis
On 11 Feb, Andre Oppermann wrote: Li, Qing wrote: http://www.kb.cert.org/vuls/id/464113 http://www.linuxsecurity.com/content/view/104980/98/ Ran the packet tests against FreeBSD 5.3 and 6-CURRENT and both respond to the SYN+FIN packets with SYN+ACK.