Subject: Re: "LAND" Attack Update (fwd)
To: Matthias Scheler <tron@lyssa.owl.de>
From: Jason Thorpe <thorpej@nas.nasa.gov>
List: tech-security
Date: 11/21/1997 01:16:27
On 21 Nov 1997 08:54:20 GMT 
 tron@lyssa.owl.de (Matthias Scheler) wrote:

 > In article <199711210306.VAA18917@ix.netcom.com>,
 > > I must have missed it...what is the "land" attack, and does anyone know if
 > > NetBSD 1.3_ALPHA has been fixed?
 > 
 > 1.3_ALPHA is not vulnerable, 1.2.1 is. :-(

Um, it sure was... at least it certainly nailed my laptop :-)

 > Has anybody got a fix for 1.2/1.2.1?

I will send you a patch offline.  I have written one, but cannot test it.
I will commit it to the netbsd-1-2 branch and release another official patch
if your feedback is positive :-)

Jason R. Thorpe                                       thorpej@nas.nasa.gov
NASA Ames Research Center                            Home: +1 408 866 1912
NAS: M/S 258-6                                       Work: +1 650 604 0935
Moffett Field, CA 94035                             Pager: +1 415 428 6939