From owner-freebsd-security  Fri Oct  6  5:29:49 2000
Delivered-To: freebsd-security@freebsd.org
Received: from whale.sunbay.crimea.ua (whale.sunbay.crimea.ua [212.110.138.65])
	by hub.freebsd.org (Postfix) with ESMTP id 9A15837B66C
	for <security@FreeBSD.ORG>; Fri,  6 Oct 2000 05:29:39 -0700 (PDT)
Received: (from ru@localhost)
	by whale.sunbay.crimea.ua (8.11.0/8.11.0) id e96CT6R92393;
	Fri, 6 Oct 2000 15:29:06 +0300 (EEST)
	(envelope-from ru)
Date: Fri, 6 Oct 2000 15:29:06 +0300
From: Ruslan Ermilov <ru@sunbay.com>
To: Fernando Schapachnik <fpscha@via-net-works.net.ar>
Cc: security@FreeBSD.ORG
Subject: Re: HERT advisory: FreeBSD IP Spoofing (fwd)
Message-ID: <20001006152906.A90221@sunbay.com>
Mail-Followup-To: Fernando Schapachnik <fpscha@via-net-works.net.ar>,
	security@FreeBSD.ORG
References: <200010061212.JAA83234@ns1.via-net-works.net.ar>
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
User-Agent: Mutt/1.2.5i
In-Reply-To: <200010061212.JAA83234@ns1.via-net-works.net.ar>; from fpscha@ns1.via-net-works.net.ar on Fri, Oct 06, 2000 at 09:12:54AM -0300
Sender: owner-freebsd-security@FreeBSD.ORG
Precedence: bulk
X-Loop: FreeBSD.org

On Fri, Oct 06, 2000 at 09:12:54AM -0300, Fernando Schapachnik wrote:
> Many of you may have read this.
> 
> It states that 4.1 is vulnerable, but doesn't mention 4.1.1. It also
> provides URL to patches that are not accesible. Somebody has more
> info?
> 
kris        2000/09/28 18:37:19 PDT

  Modified files:
    sys/netinet          tcp_seq.h tcp_subr.c 
  Log:
  Use stronger random number generation for TCP_ISSINCR and tcp_iss.
  
  Reviewed by:	peter, jlemon
  
  Revision  Changes    Path
  1.12      +2 -2      src/sys/netinet/tcp_seq.h
  1.81      +2 -2      src/sys/netinet/tcp_subr.c


kris        2000/09/29 01:48:45 PDT

  Modified files:        (Branch: RELENG_4)
    sys/netinet          tcp_seq.h tcp_subr.c 
  Log:
  MFC: Use stronger randomness for TCP_ISSINCR and tcp_iss
  
  Revision  Changes    Path
  1.11.2.1  +2 -2      src/sys/netinet/tcp_seq.h
  1.73.2.5  +2 -2      src/sys/netinet/tcp_subr.c


kris        2000/09/29 01:49:56 PDT

  Modified files:        (Branch: RELENG_3)
    sys/netinet          tcp_seq.h tcp_subr.c 
  Log:
  MFC: Use stronger randomness for TCP_ISSINCR and tcp_iss
  
  Revision  Changes    Path
  1.8.4.2   +2 -2      src/sys/netinet/tcp_seq.h
  1.49.2.6  +2 -2      src/sys/netinet/tcp_subr.c

-- 
Ruslan Ermilov		Oracle Developer/DBA,
ru@sunbay.com		Sunbay Software AG,
ru@FreeBSD.org		FreeBSD committer,
+380.652.512.251	Simferopol, Ukraine

http://www.FreeBSD.org	The Power To Serve
http://www.oracle.com	Enabling The Information Age


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message