What is the loss of disabling echo? Or discard for that matter.
On Thu, 8 Feb 1996, Greg Woods wrote:
> On Thu, 8 Feb 1996, Jason L. Haar wrote:
> >
> >
> >I'm wondering if a new vulnerablity with the (a particular implementation
> > maybe) echo server has been found. Anybody else notice this trend??
>
> There's a CERT advisory out; forged packets that appear to come from the
> echo port of one host are sent to the echo port of another, causing the
> echo servers to bombard one another. This will hose both machines
> and the net between them, a very effective denial of service attack.
>
> --Greg
>
Follow-Ups:
|
|
