oss-sec mailing list archives

Re: CVE Request -- kernel: tcp: drop SYN+FIN messages

From: John Haxby <john.haxby () oracle com>
Date: Wed, 30 May 2012 13:01:58 +0100

On 30/05/12 10:44, John Haxby wrote:


Recently we have a couple of queries relating to a Nessus "TCP/IP
SYN+FIN Packet Filtering Weakness".   This has not been helped by the
fact that [1] actually points (indrectly) to CVE-2002-2438 which is
actually a SYN+RST problem.

[snip]

Sigh.   Enigmail seems to be unable to sign messages for me.   The
references in the message are all independenty verifiable though.

jch

Current thread:

CVE Request -- kernel: tcp: drop SYN+FIN messages John Haxby (May 30)
- Re: CVE Request -- kernel: tcp: drop SYN+FIN messages John Haxby (May 30)
- Re: CVE Request -- kernel: tcp: drop SYN+FIN messages Florian Weimer (May 30)
  - Re: CVE Request -- kernel: tcp: drop SYN+FIN messages John Haxby (May 30)
    - Re: CVE Request -- kernel: tcp: drop SYN+FIN messages Kurt Seifried (May 30)
    - Re: CVE Request -- kernel: tcp: drop SYN+FIN messages Kurt Seifried (May 30)
- Re: CVE Request -- kernel: tcp: drop SYN+FIN messages Kurt Seifried (May 30)
  - Re: CVE Request -- kernel: tcp: drop SYN+FIN messages Kurt Seifried (May 31)
    - Re: CVE Request -- kernel: tcp: drop SYN+FIN messages John Haxby (Jun 01)
    - Re: CVE Request -- kernel: tcp: drop SYN+FIN messages Kurt Seifried (Jun 01)
    - Re: CVE Request -- kernel: tcp: drop SYN+FIN messages John Haxby (Jun 01)
    - Re: CVE Request -- kernel: tcp: drop SYN+FIN messages Kurt Seifried (Jun 01)

(Thread continues...)