[VulnDiscuss] Re: OpenBSD IPv6 remote kernel crash

I don't understand Guninski's exploit announcement completely.  He says
OpenBSD is still better than Windows.  Did he find a vulnerability with
Windows IPv6 stack, or is he just slamming MS?

Roger

****************************************************************************
****
*Roger A. Grimes, Computer Security Consultant
*CPA, MCSE:Security (NT/2000/2003/MVP), CNE (3/4), A+
*email: [email protected]
*cell: 757-615-3355
*Author of Malicious Mobile Code:  Virus Protection for Windows by O'Reilly
*http://www.oreilly.com/catalog/malmobcode
*Author of upcoming Honeypots for Windows (Apress)
****************************************************************************
*****

----- Original Message ----- 
From: "Thor Larholm" <[email protected]>
To: <[email protected]>
Sent: Thursday, February 05, 2004 3:58 PM
Subject: [VulnWatch] OpenBSD IPv6 remote kernel crash


> Georgi Guninski posted an advisory on his site about a remote crash in the
> OpenBSD kernel caused by connecting with a small IPv6 MTU.
>
> http://www.guninski.com/obsdmtu.html
>
> The error was present in revision 1.81 of /src/sys/netinet6/ip6_output.c
and
> is fixed in revision 1.82 ( 2004/02/04 08:47:41 ), you can see the colored
> diffs at
>
>
http://www.openbsd.org/cgi-bin/cvsweb/src/sys/netinet6/ip6_output.c.diff?r1=text&tr1=1.81&r2=text&tr2=1.82&f=h
>
>
> OpenBSD administrators should pull the revised code from CVS and recompile
> their kernels.
>
>
>
>
> Regards
>
> Thor Larholm
> Senior Security Researcher
> PivX Solutions
> 24 Corporate Plaza #180
> Newport Beach, CA 92660
> http://www.pivx.com
> [email protected]
> Phone: +1 (949) 231-8496
> PGP: 0x5A276569
> 6BB1 B77F CB62 0D3D 5A82 C65D E1A4 157C 5A27 6569
>
> PivX defines "Proactive Threat Mitigation". Get a FREE Beta Version of
> Qwik-Fix <http://www.qwik-fix.net>
>