exploit the possibilities

Register | Login

FilesNewsUsersAuthors

Home Files News &[SERVICES_TAB]About Contact Add New

Showing 1 - 1 of 1

Files from Hacker Emergency Response Team

hert.0003.freebsd.isn

Posted Oct 7, 2000

Authored by Hacker Emergency Response Team | Site hert.org

HERT Advisory #3 - The way FreeBSD handles random sequence number incrementing is weak. With 3 consecutive random increments captured from the responses of 4 SYN packets sent to the target, an attacker can rebuild the random state of the remote machine, and predict the next sequence number. Includes proof of concept code.

tags | remote, proof of concept

systems | freebsd

SHA-256 | 4fdde88e38ec9b6ff465d28188c0d4ae5779697d0340aa76bb684473eced5ca5

Download | Favorite | View