bugtraq - Re: ICMP Vulnerabilities

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite for Android: free password hash cracker in your pocket

[<prev] [next>] [<thread-prev] [day] [month] [year] [list]

Date: Sat, 9 Jul 2005 00:00:01 +0200
From: Joachim Schipper <j.schipper@...h.uu.nl>
To: bugtraq@...urityfocus.com
Subject: Re: ICMP Vulnerabilities

On Thu, Jul 07, 2005 at 05:02:40PM -0700, Dragos Ruiu wrote:
> On Thursday, 7 July 2005 J. Oquendo wrote:
> > This isn't news news, I've been tinkering with something along
> > these lines since 1999
> 
> Well you may have known about the problem, but you didn't fix it.
> The news isn't the problem, it's the FIX. The fix which people haven't
> applied to their OS distributions yet.

On this note, does anyone know to what extent operating systems other
than OpenBSD are affected? The article lists FreeBSD and Linux as having
(partially) solved the issues; are the issues not named still
outstanding? Workaround? Patch?

Is Windows, once again, vulnerable? Cisco systems (seems to be the
case)?

		Joachim