full-disclosure - Re: TCP/IP vulnerability

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [day] [month] [year] [list]

Message-Id: <4A1C42C8-1DDE-41DC-8B6A-6FA65CC1445C@gmail.com>
Date: Wed, 23 May 2007 21:17:09 -0700
From: Andrew Farmer <andfarm@...il.com>
To: "Mohit Kohli" <mkohli@...hMahindra.com>
Cc: full-disclosure <full-disclosure@...ts.grok.org.uk>
Subject: Re: TCP/IP vulnerability

On 23 May 07, at 08:27, Mohit Kohli wrote:
> Thanks for the reply but have some concerns...
> 1)Tearn drop and land attack work on win 95 server,how to exploits  
> this vulnerability or its variant on windows 2000 or linux.

I don't know about Windows 2000, but Linux doesn't appear to have  
ever been affected by LAND, and Teardrop was protected against with  
2.0.32. Getting a kernel that old to run will be very difficult  
unless you've got a copy of some *really* old distribution handy.

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/