Re: Borderware predictable initial TCP

From: Aggelos P. Varvitsiotis (avarvitat_private)
Date: Thu Sep 03 1998 - 02:14:56 PDT

Next message: HD Moore: "More Overflows..."

Previous message: Ulf Munkedal: "Re: Borderware predictable initial TCP"
Maybe in reply to: racer-xat_private: "Borderware predictable initial TCP"
Next in thread: Roy Hills: "Re: Borderware predictable initial TCP"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

> AFAIK, this problem is not a Firewall-1 problem but a HP-UX problem.
>
> Please respond to Gigi Sullivan <sullivanat_private>
> To:     BUGTRAQat_private
> Subject:        Re: Borderware predictable initial TCP sequence numbers
>
> Hello there,
>
> This can be applied also to Firewall-1 (CheckPoint) running on an
> HP-UX 10.X series.
>
>
> bye bye
>
>
> *************************************************
> Racer X
>
> (Unknown to Speed, Racer X is actually his older
> brother Rex, who ran away from home years ago)
> racer-xat_private
> *************************************************
> --------------------------------------------------------------------------------
>  -------------------------------\r\nGet your free email from altavista.iname.com
>

Fix for HP-UX 9.X (this has been around for quite some time):

        echo "tcp_random_seq/W 2" | /usr/bin/adb -w /hp-ux /dev/kmem

There is a similar fix for 10.X floating around, for whom may
be interested to look for it.


a.varvitsiotisat_private                     A.Varvitsiotis
                                             ICCS Computer Center
                                      National Technical University of Athens

Next message: HD Moore: "More Overflows..."
Previous message: Ulf Munkedal: "Re: Borderware predictable initial TCP"
Maybe in reply to: racer-xat_private: "Borderware predictable initial TCP"
Next in thread: Roy Hills: "Re: Borderware predictable initial TCP"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

This archive was generated by hypermail 2b30 : Fri Apr 13 2001 - 14:14:50 PDT