[16121] in bugtraq
Re: Identifying SUN Solaris Machines using ICMP Address Mask
daemon@ATHENA.MIT.EDU (MMS26)
Tue Aug 8 01:41:23 2000
MIME-Version: 1.0
Content-Type: TEXT/PLAIN; charset=US-ASCII
Message-ID: <Pine.BSI.4.21.0008071202500.5309-100000@angst.raze.net>
Date: Mon, 7 Aug 2000 12:06:39 -0700
Reply-To: MMS26 <mms@SPEAKEASY.ORG>
From: MMS26 <mms@SPEAKEASY.ORG>
X-To: Ofir Arkin <ofir@ITCON-LTD.COM>
To: BUGTRAQ@SECURITYFOCUS.COM
In-Reply-To: <FNEAICGJJOCNGPFNHFONIEAICDAA.ofir@itcon-ltd.com>
On Sat, 5 Aug 2000, Ofir Arkin wrote:
one reason why good solaris admins do things like:
ndd -set /dev/ip ip_respond_to_address_mask_broadcast 0
ndd -set /dev/ip ip_respond_to_echo_broadcast 0
ndd -set /dev/ip ip_respond_to_timestamp 0
ndd -set /dev/ip ip_respond_to_timestamp_broadcast 0
ndd -set /dev/ip ip_forward_directed_broadcasts 0
> Subject:
> Identifying SUN Solaris Machines Using ICMP Address Mask Requests with
> a little twist.
>
these icmp messages can be used to cause all sorts of havoc... ;)
MMS26
