loose source routing

Next in thread: Renaud Deraison: "Re: [Plugins-writers] loose source routing"
Reply: Renaud Deraison: "Re: [Plugins-writers] loose source routing"
Reply: Renaud Deraison: "Re: [Plugins-writers] loose source routing"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

cissper@private

Hi folks

can anybody explain me how I can reproduce loose
source routing?

My nessus scan reports that the destination host
accepted loose source routed packets. However, I do
believe those packets were only dropped by the
fireall. 
I think this plug-in is not working correctly, can
anybody give me some advise?

nessus message:
The remote host accepts loose source routed IP
packets.
The feature was designed for testing purpose.
An attacker may use it to circumvent poorly designed
IP filtering
and exploit another flaw. However, it is not dangerous
by itself.

Solution : drop source routed packets on this host or
on other ingress
routers or firewalls.

Risk factor : Low

Find local movie times and trailers on Yahoo! Movies.
http://au.movies.yahoo.com
_______________________________________________
Nessus mailing list
Nessus@private
http://mail.nessus.org/mailman/listinfo/nessus