[VulnDiscuss] Re: TCP Reset Attacks: Paper and Code Now Availble
[email protected] Fri, 23 Apr 2004 08:10:36 -0400
| Newsgroups | gmane.comp.security.vulnerabilities.watch.general,gmane.comp.security.bugtraq,gmane.comp.security.full-disclosure |
|---|---|
| Message-ID | <[email protected]> |
Quoting Kurt Seifried <[email protected]>: > According to the Cisco presentation afterwards, Cisco's RST behavior makes > it non vulnerable as there is a wait period after a certain number of bad > RST packets are recieved. Thus Cisco IOS is basically not affected. So, this advisory on Cisco's site is a hoax? It states: "Products which contain a TCP stack are susceptible to this vulnerability. All Cisco products and models are affected." http://www.cisco.com/warp/public/707/cisco-sa-20040420-tcp-ios.shtml Regards, Sullo -- http://www.cirt.net/ | http://www.osvdb.org/