full-disclosure - Re: [VulnWatch] TCP Reset Attacks: Paper and Code Now Availble

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

From: sullo at cirt.net (sullo@...t.net)
Subject: Re: [VulnWatch] TCP Reset Attacks: Paper and Code Now Availble

Quoting Kurt Seifried <listuser@...fried.org>:
> According to the Cisco presentation afterwards, Cisco's RST behavior makes
> it non vulnerable as there is a wait period after a certain number of bad
> RST packets are recieved. Thus Cisco IOS is basically not affected.

So, this advisory on Cisco's site is a hoax? It states:
"Products which contain a TCP stack are susceptible to this vulnerability. All
Cisco products and models are affected."

http://www.cisco.com/warp/public/707/cisco-sa-20040420-tcp-ios.shtml


Regards,
Sullo



--

http://www.cirt.net/   |   http://www.osvdb.org/