TCP Sequence Number Approximation Reset Denial of Service Vulnerability

jimmy14k

1. High:
   
2. ?????TCP Sequence Number Approximation Reset Denial of Service Vulnerability
   
3. ?????Risk:High
   
4. ?????Application:general
   
5. ?????Port:0
   
6. ?????Protocol:tcp
   
7. ?????ScriptID:902815
   
8. ?????Overview: The host is running TCP services and is prone to denial of service
   
9. ????? vulnerability.
   
10. ????? Vulnerability Insight:
    
11. ????? The flaw is triggered when spoofed TCP Reset packets are received by the
    
12. ????? targeted TCP stack and will result in loss of availability for the attacked
    
13. ????? TCP services.
    
14. ????? Impact:
    
15. ????? Successful exploitation will allow remote attackers to guess sequence numbers
    
16. ????? and cause a denial of service to persistent TCP connections by repeatedly
    
17. ????? injecting a TCP RST packet.
    
18. ????? Impact Level: System
    
19. ????? Affected Software/OS:
    
20. ????? TCP
    
21. ????? Fix: Please see the referenced advisories for more information on obtaining
    
22. ????? and applying fixes.
    
23. ????? References:
    
24. ????? http://www.osvdb.org/4030
    
25. ????? http://xforce.iss.net/xforce/xfdb/15886
    
26. ????? http://www.us-cert.gov/cas/techalerts/TA04-111A.html
    
27. ????? http://www-01.ibm.com/support/docview.wss?uid=isg1IY55949
    
28. ????? http://www-01.ibm.com/support/docview.wss?uid=isg1IY55950
    
29. ????? http://www-01.ibm.com/support/docview.wss?uid=isg1IY62006
    
30. ????? http://www.microsoft.com/technet/security/Bulletin/MS05-019.mspx
    
31. ????? http://www.microsoft.com/technet/security/bulletin/ms06-064.mspx
    
32. ????? http://www.cisco.com/en/US/products/csa/cisco-sa-20040420-tcp-nonios.html
    
33. ????? http://www.cisco.com/en/US/products/csa/cisco-sa-20040420-tcp-nonios.html
    
34. ?????CVSS Base Score : 5.0
    
35. ?????Family name: Denial of Service
    
36. ?????Category: infos
    
37. ?????Copyright: Copyright (C) 2012 SecPod
    
38. ?????Summary: Determine TCP Sequence Number Approximation Vulnerability

复制代码

这个漏洞怎么处理，只能升级linux内核吗？求解!
前面的问号可以忽略，从pdf中copy出来的

q1208c

现在主流的操作系统, 网络层都是在内核里实现的, 所以, 如果是在网络层出现 bug, 基本上只能升级内核了.

当然, 有一层是可以通过调整参数来避免的.

Seq 的bug, 我没有印象. 所以, 不知道能不能调整参数来解决.