Skip site navigation (1)Skip section navigation (2)
Date:      Sat, 7 Apr 2001 17:39:10 -0500
From:      "Jacques A. Vidrine" <n@nectar.com>
To:        John Howie <JHowie@msn.com>
Cc:        Crist Clark <crist.clark@globalstar.com>, lee@kechara.net, freebsd-security@FreeBSD.ORG
Subject:   Re: Theory Question
Message-ID:  <20010407173910.B69155@spawn.nectar.com>
In-Reply-To: <058701c0bfad$265e8530$0101a8c0@development.local>; from JHowie@msn.com on Sat, Apr 07, 2001 at 02:53:11PM -0700
References:  <200104071610.RAA18117@mailgate.kechara.net> <3ACF83FA.55761A7B@globalstar.com> <20010407162552.D87286@hamlet.nectar.com> <058701c0bfad$265e8530$0101a8c0@development.local>

next in thread | previous in thread | raw e-mail | index | archive | help
On Sat, Apr 07, 2001 at 02:53:11PM -0700, John Howie wrote:
> In practice a machine with no IP address that just receives packets is not
> likely to be vulnerable. Crist's scenario is not a probable one (as he,
> himself, acknowledges). 

Such exploits  have been  seen in  the past,  e.g. the  tcpdump buffer
overrun.   I  guess the  assumption  is  that  your opponent  is  more
sophisticated  than  a script  kiddie,  and  wants something  in  your
network.

Cheers,
-- 
Jacques Vidrine / n@nectar.com / jvidrine@verio.net / nectar@FreeBSD.org

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20010407173910.B69155>