Re: Microsoft IKE DoS... source port 500?

From: Nelson Brito (nelson@tw-award.com)
Date: Fri Oct 12 2001 - 04:31:02 PDT


[...]

: source port of 500?  Is this one of those 'unofficial standards' and
: hence the reason for Microsoft's implementation processing these packets
: as normal?

[...]

If you send a UDP scan from nmap you will see this port IS OPEN, so you can
realize that when UDP packet is send to any port, this port procced if it is
work.

PS: Attached is a proof-of-concept code that I sent to Security Focus.

Sem mais,
--
Nelson Brito







This archive was generated by hypermail 2b30 : Sun Dec 30 2001 - 08:47:23 PST