Re: TCP RST attacks and Windows Servers
From: Doug Sherman [MVP] (dsherman_at_nospam.tampabay.rr.com)
Date: 04/22/04
- Next message: Joseph Geretz: "Windows Credentialing Security Problem"
- Previous message: Eric Chamberlain: "Some SCEP CA questions"
- In reply to: baillard: "TCP RST attacks and Windows Servers"
- Next in thread: Karl Levinson [x y] mvp: "Re: TCP RST attacks and Windows Servers"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Date: Thu, 22 Apr 2004 00:00:58 -0400
Windows routing does not natively support BGP. However, Windows networks
may employ BCP capable routers and the API could provide support for BGP
written by third party vendors. See:
http://msdn.microsoft.com/library/default.asp?url=/library/en-us/dnw2kmag00/html/Redundant2.asp
Doug Sherman
MCSE Win2k/NT4.0, MCSA, MCP+I, MVP
"baillard" <baillard@hotmail.com> wrote in message
news:er5skH%23JEHA.3924@tk2msftngp13.phx.gbl...
> I have not seen anything yet from Microsoft about the TCP RST possible
> attacks that are detailed in the following bulletins:
>
> Technical Cyber Security Alert TA04-111A
> Vulnerabilities in TCP
> http://www.us-cert.gov/cas/techalerts/TA04-111A.html
>
> SANS
>
http://isc.incidents.org/diary.php?date=2004-04-20&isc=9a4c61bc294b1039c8ecacff03534c2c
> CVE entry: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2004-0230
> Cisco announcement:
> http://www.cisco.com/warp/public/707/cisco-sa-20040420-tcp-ios.shtml
>
> If I understand correctly, an attack would affect any long term session
TCP
> communications. Since Windows Server 2003 and 2000 running as Domain
> Controllers are not supported using IPSEC (one mentioned work around),
what
> possible attacks will we be facing in the future? Does standard Windows
> networking (SMB) depend on this kind of communication? Can a Windows box
> setup to do routing (I don't remember if RRAS supports BGP) be affected by
> these kinds of attacks?
>
>
- Next message: Joseph Geretz: "Windows Credentialing Security Problem"
- Previous message: Eric Chamberlain: "Some SCEP CA questions"
- In reply to: baillard: "TCP RST attacks and Windows Servers"
- Next in thread: Karl Levinson [x y] mvp: "Re: TCP RST attacks and Windows Servers"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Relevant Pages
|
|
