[9886] in bugtraq
Re: Linux Blind TCP Spoofing (fwd)
daemon@ATHENA.MIT.EDU (John D. Hardin)
Wed Mar 10 17:36:05 1999
Date: Wed, 10 Mar 1999 12:17:25 -0800
Reply-To: "John D. Hardin" <jhardin@WOLFENET.COM>
From: "John D. Hardin" <jhardin@WOLFENET.COM>
To: BUGTRAQ@NETSPACE.ORG
---------- Forwarded message ----------
Date: Wed, 10 Mar 1999 19:46:13 +0000 (GMT)
From: Alan Cox <alan@lxorguk.ukuu.org.uk>
To: jhardin@WOLFENET.COM
Subject: Re: Linux Blind TCP Spoofing
> > It is recommended that kernels below version 2.0.36 be upgraded to
> > eliminate this vulnerability.
>
> This implies but does not explicitly state that 2.0.36+ kernels are
> not vulnerable. Is this the case?
NAI reported the problem to me during the 2.0.36 development period and
the bug was squashed.
