/?pid=5167

Updated:11:20 AM EDT Apr 23


this is ggmania.com subsite New attacks reveal fundamental problems with TCP - TechAmok

New attacks reveal fundamental problems with TCP - [security]
02:49 PM EDT - Oct,02 2008 - post a comment

A pair of security experts are now discussing several fundamental issues with the TCP protocol that can be exploited to cause denials of service and resource consumption on virtually any remote machine that has a TCP service listening for remote connections. The problems, which were identified as far back as 2005, are not simply vulnerabilities in products from one or two vendors, but are issues with the ways in which routers, PCs and other machines handle TCP connection requests from unknown, remote machines. The attacks can be carried out with very little bandwidth, such as that available on a cable modem, and there don't appear to be any workarounds or fixes for the problems at this point.

Lee and Louis, who will present their findings at the T2 Conference in Helsinki in mid-October, are not releasing the details of the flaws, but Lee said that they evolve from the way that Web servers and other machines handle the three-way TCP handshake at the beginning of a new connection. Their attacks enable them to consume all of the resources of a given TCP service. In some cases, the attacks can cause the remote machine to reboot. Lee said that Louis discovered the issue when the pair were doing large-scale penetration tests that required them to scan tens of thousands of IP addresses. To make life easier, Louis wrote a tool called Unicornscan , which is a distributed TCP/IP stack that can be used for TCP scanning. It was while reviewing packet dumps from scans with the tool that Louis noticed some anomalies.


Add your comment (free registrationrequired)

Short overview of recent news articles

Apr,23 2024 ATLAS | Official Trailer | Netflix
Apr,22 2024 The World's Fastest CPU (Technically...) - Intel i9-14900KS
Apr,22 2024 We can do THIS now! - Lumafield CT Scanner
Apr,21 2024 Huawei Pura 70 Ultra - Apple Should be WORRIED
Apr,21 2024 Sony 2024 TV Lineup Revealed
Apr,20 2024 ICE - A Thousand Suns / Episode 1
Apr,20 2024 Minisforum V3 AMD Tablet Review
Apr,20 2024 AMD & Intel SLASH CPU Prices!
Apr,20 2024 EK is Imploding: Not Paying Employees, Partners, & Suppliers
Apr,20 2024 Backing Up My NAS To My... Parents' House?
Apr,20 2024 NEW Ryzen APU BEATS RTX 40 GPUs!
Apr,20 2024 (Live) Black Tape Project - All New Raw and Uncut - LA Fashion Week
Apr,19 2024 NVIDIA Geforce 552.22 WHQL Driver
Apr,19 2024 You Deserve this much OLED - AORUS CO49DQ
Apr,19 2024 Unreal Engine 5.4 looks ULTRA PHOTOREALISTIC
Apr,18 2024 Radeon RX 5700 XT vs. 7700 XT, 2024 Revisit
Apr,18 2024 I Will Build You a PC Right Now!
Apr,17 2024 These games carry REAL security risks! BEWARE!
Apr,17 2024 Visible First to Offer Annual Payment Plan, with Discount up to 26%
Apr,17 2024 Is Coding Still Worth Learning in 2024?
Apr,17 2024 All New Atlas - Boston Dynamics
Apr,16 2024 The NEW Chip Inside Your Phone! (NPUs)
Apr,16 2024 XPS 14 vs 14" MacBook Pro - Apple just KILLED Intel!
Apr,15 2024 The Most 2024 Laptop - Razer Blade 14 Review
Apr,15 2024 NEVER install these programs on your PC... EVER!!!
Apr,14 2024 Use Live Translate on Galaxy S24 series to translate a call's
Apr,14 2024 I Tried a Non-Invasive Blood Sugar Watch. Miracle or Scam?
Apr,13 2024 Samsung Galaxy Ring - This Just Got Interesting
Apr,13 2024 Piracy Is Over Party - WAN Show April 12, 2024
Apr,13 2024 Conan O'Brien Needs a Doctor While Eating Spicy Wings
Apr,13 2024 Beatbox Jcob recreats every sound
Apr,13 2024 Intel is Gunning for NVIDIA
Apr,13 2024 Building a Budget DIY Home Surveillance System
Apr,12 2024 Lenovo Yoga Buyers Guide - What's the Best Thin and Light Laptop
Apr,11 2024 DARK MATTER Trailer (2024) New Sci-Fi Movies 4K
Apr,11 2024 How to Build a PC, the last guide you'll ever need! (2024 Update)
Apr,10 2024 Intel 300 CPU Review - The Pentium Replacement is Finally Here...
Apr,10 2024 Wubuntu, the Dubious Linux Windows
Apr,09 2024 A Lite Version Of Windows 11 To Be Released This Year
Apr,09 2024 This $150 Smartphone might be All You Need
>> News Archive <<

TechAmok - Privacy Policy        loading time:0.01secs