In a rather startling revelation, the UK's National Infrastructure Coordination Centre has discovered a major flaw in TCP/IP that could allow hackers to crash vulnerable routers and severely disrupt Internet traffic. The problem stems from the fact that it's far easier to reset TCP/IP sessions using spoofed packets than previously thought.
In short, the exact sequence number need not be predicted as most TCP/IP implementations will accept any sequence number that falls in a particular range! This makes predicting the sequence number much easier, and thus spoofing RST packets is possible. Vendors such as Cisco are rushing patches.
Can Your EDR Spot the Attack?
Enterprise-Class Cloud & Network Monitoring
Threat Traffic Analysis
Wi-Fi Key Generator
IT Infrastructure Monitoring
Follow Firewall.cx
Recommended Downloads
Cisco Password Crack
Decrypt Cisco Type-7 Passwords on the fly!
Automated Patching Solution
Firewall Analyzer
