The Ethical Hacker Network - New DOS Attack Is a Killer.. (from Dark Reading)

Latest Additions

Who's Online

EH-Net News Feeds

Latest Additions

slimjim100

EH-Net Columnist
Sr. Member

Offline

Posts: 385

New DOS Attack Is a Killer.. (from Dark Reading)

« on: October 01, 2008, 09:18:17 AM »

Quote

Things are a-brewin’ in Sweden. Sweden is not just home of the infamous bikini team, it is also the home of Outpost 24, an equally sexy software-as-a-service network scanning service, and the employer of my friend Robert E. Lee and his colleague Jack C. Louis. These guys are the inventors of UnicornScan, a user-land TCP stack turned into a port scanner and a new tool "sockstress" anbd it could cause some real issues on the internet!

http://www.darkreading.com/blog.asp?blog_sectionid=403&doc_id=164939

A new kind of attack that was found by Mr. Lee & Mr. Louis (well back in 2005) and will be demo'ed soon at upcoming T2 conference in Helsinki.

MP3 interview here (Enginsh played 5 minutes in) http://debeveiligingsupdate.nl/audio/bevupd_0003.mp3

The tool's name is "sockstress" and is not going to be released since the vendors of affected TCP stacks have not fixed them yet.

Robert E Lee's Blog: http://blog.robertlee.name/

If this is true and is released there could be sme real issues for all of the internet.

Cheers,

Brian


« Last Edit: October 01, 2008, 09:39:09 AM by don »	Logged

CISSP, CCSE, CCNA, CCAI, Network+, Security+, JNCIA, & MCP

Andrew Waite

Hero Member

Offline

Posts: 857

Re: New DOS Attack Is a Killer.. (from Dark Reading)

« Reply #1 on: October 01, 2008, 09:43:47 AM »

Brian,

I read this over at DarkReading earlier today. I'm hoping it's more hype than substance as this could be fairly nasty if it lives up to billing. Can't see too much point in worrying at the moment though, as there aren't enough details release to the mainstream to work on a defence, and supposedly there are no work arounds at the moment.

Think I might start panicking if future developments on this go sour...


	Logged

-- http://www.infosanity.co.uk
-- http://blog.infosanity.co.uk

geekyone

Full Member

Offline

Posts: 175

Re: New DOS Attack Is a Killer.. (from Dark Reading)

« Reply #2 on: October 01, 2008, 04:03:32 PM »

I am really glad they are being responsible about disclosure on this one. If it is as bad as they say things could get bad quick. I am definitely with you on this one RR, really hope it is just hype. I am looking forward to finding out the details as soon as it is patched.


	Logged

CISSP, CEH, GPEN, GCIH, GCFA

$w33p3R

Newbie

Offline

Posts: 30

Re: New DOS Attack Is a Killer.. (from Dark Reading)

« Reply #3 on: October 01, 2008, 09:39:04 PM »

Well, I have been the victim of Dos attacks before on servers that I had and I can say first hand they are not fun to experience. But, I don't think I have ever seen a Dos attack that couldn't be defended against at some level on the network. I am calling hype until I see proof.