Re: Asterisk ignoring replayed libpcap sessions

Blue Boar <[email protected]> Thu, 02 Nov 2006 11:46:45 -0800
Newsgroups gmane.comp.security.vulnerabilities
Message-ID <[email protected]>
If you originally thought that a simple TCP replay, with sequence and 
port numbers fixed up, would always work, consider this:

-Client connects
-Server says "Say 3"
-Client says "3"
-connection continues.

So you replay that.  This time:

-Server says "Say 5"
-replayed Client says "3"
-Server disconnects.

In many cases, a replayer that doesn't understand the application 
protocol will fail.

Now extend that to a TCP connection that does an encryption setup with a 
challenge-response.

					BB