Серьезная DoS-атака пртив *BSD updated since 10.05.2000
Published:		23.06.2000
Source:		BUGTRAQ
SecurityVulns ID:		130
Type:		remote
Level:		7/10
Описание:		IP-пакет с некорректным смещением параметров IP (например timestamp) вызывает аварийную остановку системы.

Affected:		NETBSD : NetBSD 1.4.2
		FREEBSD : FreeBSD 3.4
		FREEBSD : FreeBSD 4.0
		FREEBSD : FreeBSD 5.0
CVE:		CVE-1999-0001 (ip_input.c in BSD-derived TCP/IP implementations allows remote attackers to cause a denial of service (crash or hang) via crafted packets.)

Original document		FREEBSD, Security Advisory: FreeBSD-SA-00:23.ip-options (23.06.2000)
		NETBSD, NetBSD Security Advisory 2000-002 (10.05.2000)
		NHC Research, [NHC20000504a.0: NetBSD Panics when sent unaligned IP options] (10.05.2000)

Files:		*BSD ip option DoS exploit
		BugTraq ID: 1173
Discuss:		Read or add your comments to this news (0 comments)