Re: More oshare testing.

From: Dariusz Zmokly (ak8735at_private)
Date: Thu Feb 04 1999 - 16:03:43 PST

  • Next message: Ragnar Hojland Espinosa: "Cyrix bug: freeze in hell, badboy"

    Hi !
    
    On Tue, 2 Feb 1999, C.J. Oster wrote:
    
    > While testing the oshare attack a little more, I have found something that
    > you may find interresting.  Here at the university, many people are
    [..]
    
    Here are my observations :)
    
    [ 2 series of attacks each of 20 to 30 trials ]
    	linux with kernel 2.0.35 against win98 polish version
    	linux with kernel 2.0.34 against same system another computer
    
    [ Procedure ]
    	Computer with windows was just started then I tried to send 10000 of
        oshare packets to him.
    
    [ Results ]
    	there is a 50 % chance windows is not vulnerable
    	25 % chance win would reboot
    	25 % chance win would show screen with 'Critical error message' then
    	it would work but doesn't see network
    
    [ Strange thing ]
    	If windows wasn't vulnerable just after starting computer I found it
        sometimes vulnerable. That happend after pinging another computer from
        windows box. It looks like performing some network activity on computer
        with windows makes it more vulnerable.
    
    greets
    globi
    / unix researcher /
    / globi on irc channels #plug, #coders /
    



    This archive was generated by hypermail 2b30 : Fri Apr 13 2001 - 14:32:43 PDT