Teardrop attack
advICE :Intrusions : 2000003

Summary

Denial of Service attempt

Details

Dangerous IP fragment overlap generated by teardrop program. Your operating system may become unstable or crash. Fixes are available for most operating systems - consult your operating system vendor for more information, or look at the CERT and Microsoft Advisories on this subject.

The source address is likely to be spoofed. This means that the sender of the frame is probably not using his actual source address, and is pretending to be someone else. Unfortunately, there is no easy way to determine who is actually sending spoofed frames.

parametric information expected The expected value of the fragment offset. offset The actual value of the fragment offset. length The length of the fragment.

 
Version appeared: