Re: DoS against DHCP

From: Felix Lindner (felix.lindner@nruns.com)
Date: 01/31/02 

Date: Thu, 31 Jan 2002 10:01:39 +0100
From: Felix Lindner <felix.lindner@nruns.com>
To: RSnake <rsnake@shocking.com>

> A DHCP server has only a certain amount of addresses availible. If
> you (a single malicious machine connected to the network) actively take up all
> availible IP address,

The Phenoelit group has a tool in their latest release of IRPAS that
does exactly this and has some more features - like selectively taking
out single hosts. http://www.phenoelit.de/irpas

regards,
Felix 

-- 
 Felix Lindner [Security Consultant] | SMTP: felix.lindner@nruns.com
 n.runs GmbH (http://www.nruns.com/) | GSM: +49 (0)171 740 20 62
If you are good at understanding the thought-rules of a commitee in
Redmond,
Washington, well, you'll have an easy time with [..] Windows. - Clifford
Stoll