Skip site navigation (1)Skip section navigation (2)
Date:      Thu, 12 Apr 2001 07:08:57 -0700
From:      Mike Allen <mikeallen99@home.com>
To:        Mike Silbersack <silby@silby.com>
Cc:        Mark T Roberts <newsletter@marktroberts.com>, freebsd-security@FreeBSD.ORG
Subject:   Re: non-random IP IDs
Message-ID:  <3AD5B6F9.64837442@home.com>
References:  <Pine.BSF.4.31.0104120103470.2153-100000@achilles.silby.com>

next in thread | previous in thread | raw e-mail | index | archive | help
You are right.  Sorry for the confusion.
I must be sleepy.  :)

Mike Allen


Mike Silbersack wrote:
> 
> On Wed, 11 Apr 2001, Mike Allen wrote:
> 
> > Predictible IP ID numbers can be used by an attacker to hijack your
> > session causing the following effects:
> >
> >   1.  The successful attacker can 'take over' your session and
> >       do anything he/she wants to do with your files.  No log
> 
> You're confusing ip ids with tcp sequence numbers.  ip ids have no such
> importance.
> 
> Mike "Silby" Silbersack

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?3AD5B6F9.64837442>