Skip site navigation (1)Skip section navigation (2)
Date:      Mon, 19 Apr 1999 15:15:25 -0700 (PDT)
From:      Jim Shankland <jas@flyingfox.com>
To:        camposr@MATRIX.COM.BR, imp@harmony.village.org
Cc:        liam@tiora.net, nicole@ispchannel.net, security@FreeBSD.ORG
Subject:   Re: poink attack (was Re: ARP problem in Windows9X/NT)
Message-ID:  <199904192215.PAA04114@biggusdiskus.flyingfox.com>
In-Reply-To: <199904192059.OAA27640@harmony.village.org>

next in thread | previous in thread | raw e-mail | index | archive | help
Warner Losh <imp@harmony.village.org> writes:

> Define vulnerable.  ARP has no security in it whatsoever[*], so there
> is *NO* way to effectively defend against this attack w/o keeping a
> database ....

Bingo.  Note the close cousin of poink, the "ifconfig attack":

ifconfig fxp0 <address-I-want-to-poink>

And you don't even need libnet, or whatever it was called.

Jim Shankland
NLynx Systems, Inc.


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?199904192215.PAA04114>