SynDrop attack
advICE :Intrusions : 2000005

Summary

Dangerous IP fragment overlap generated by the syndrop program. Your operating system may become unstable or crash.

Details

Fixes are available for most operating systems - consult your operating system vendor for more information, or look at the CERT and Microsoft Advisories on this subject.

The source address is likely to be spoofed. This means that the sender of the frame is probably not using his actual source address, and is pretending to be someone else. Unfortunately, there is no easy way to determine who is actually sending spoofed frames.

parametric information expected The expected value of the fragment offset. offset The actual value of the fragment offset. length The length of the fragment.

 
Version appeared: