Openbsd Denial Of Service

Forums: Openbsd Denial Of Service - Forums

Page 1 of 1

You cannot start a new topic
You cannot reply to this topic

Openbsd Denial Of Service TCP Retransmission Timeout Calculation

#1 Guest_oxydrine_*

Group: Guests

Posted 13 January 2005 - 04:00 AM

A vulnerability has been reported in OpenBSD, which can be exploited by malicious, local users to cause a DoS (Denial of Service).

The vulnerability is caused due to an error in the TCP stack when calculating TCP retransmission timeouts. This can be exploited to crash the system by sending some specially crafted packets with specific values in the TCP timestamp option.

Patches

OpenBSD 3.6:
ftp://ftp.openbsd.or...n/010_rtt.patch

OpenBSD 3.5:
ftp://ftp.openbsd.or...n/027_rtt.patch

more info : http://secunia.com/advisories/13819/

++