🚀 go-pugleaf

In comp.dcom.sys.cisco Adrian Jensen <ad_jensen@hotmail.com> wrote:
> Jeff C wrote:
> [snip]
>> 
>> Like you we placed the access-lists up nearly immeadately and as we have 
>> to opportunity to upgrade IOS we can remove them.  One thing that I 
>> noticed is that I didn't get any hits.  Have you noticed any hits on 
>> yours?
>> 

> I've got an administrator friend at a local hosting company here. 
> Talking to him the other day, he is seeing 2 or 3 attempted exploits 
> (seemingly random atttacks) a day in their IP space.

> As for the exploit code itself. I've seen it, downloaded it, compiled 
> it. It works as advertised, just a simple command line utility. Give it 
> the IP to attack and the proper TTL, you have to be just slightly 
> smarter than a script kiddie to use it.

> Adrian

no it doesn't, my code I posted on the day the advisory came out
at 11:30pm was abused by someone who got it from a friend that
wasn't supposed to give it away. hence the sending via PGP and the
sentence "don't distribute this". mine calculated the ttl to send
in the packet with a traceroute, and there was a field for "ttl
padding". a number that represented a negative and positive offset
to add accountability for the oops factor. that's what I get for
writing user friendly code.


> -----= Posted via Newsfeeds.Com, Uncensored Usenet News =-----
> http://www.newsfeeds.com - The #1 Newsgroup Service in the World!
> -----==  Over 80,000 Newsgroups - 16 Different Servers! =-----

-- 
The complexity of a weapon is inversely proportional to the IQ of
the weapon's operator.