Re: About ping request?

From: Patrick Morris (pmorris@wilshire.com)
Date: 05/27/02 

Date: Mon, 27 May 2002 14:57:56 -0700
From: Patrick Morris <pmorris@wilshire.com>
To: focus-ms@securityfocus.com

There's plenty of documentation out there on past and present ICMP
vulnerabilities; far too many of them for me to list here. Most of
them are of the denial-of-service variety, though there have been
instances where pings could be used to gain root access to a box.

Jens Benecke schrieb am Friday, den 24. May 2002:

> On Mon, May 20, 2002 at 11:06:31AM -0700, Patrick Morris wrote:
>
> Please elaborate. I don't see what 'nastiness' can be hidden inside an
> ICMP echo-request packet, unless your TCP/IP stack is really severely
> broken.