tcp vulnerablity and freebsd?

[Matthew Seaman]

On Tue, Apr 20, 2004 at 02:53:46PM +0000, Aaron Sloan wrote:
> Is the TCP vulnerability something to worry about in Freebsd?
> 
> http://www.osvdb.org/displayvuln.php?osvdb_id=4030

Nothing has been announced -- it's a matter under discussion on the
freebsd-security@ list right now, so the Security Team certainly knows
about the problem.  However an educated guess would be that since
'Nokia IPSO' products are vulnerable, other BSD derived systems
probably are as well.

Note that this attack seems to apply to the majority of pieces of kit
capable of emitting TCP/IP traffic, so even if your FreeBSD kit gets
fixed in short order, you'll probably still be vulnerable to attacks
against your ISP or intermediate systems between you and the sites you
want to communicate with.  Very bad news that this was broken to the
public before all the vendors had a chance to put fixes in place.

	Cheers,

	Matthew

-- 
Dr Matthew J Seaman MA, D.Phil.                       26 The Paddocks
                                                      Savill Way
PGP: http://www.infracaninophile.co.uk/pgpkey         Marlow
Tel: +44 1628 476614                                  Bucks., SL7 1TH UK
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 187 bytes
Desc: not available
Url : http://lists.freebsd.org/pipermail/freebsd-questions/attachments/20040420/ccbbebc0/attachment.bin