Linux Blind TCP Spoofing Vulnerability

Solution:
This issue was patched in kernel 2.0.33 and fixed in 2.0.34, but the problem was re-introduced in 2.0.36 .

In an email to Bugtraq on August 10, Salvatore Sanfilippo -antirez- <antirez@SPEEDCOM.IT> mentioned that he is working on a patch for this, and will post it to Bugtraq when it is complete.

Solar Designer has written a patch for 2.0.37, which is available from:
http://www.false.com/security/linux/



 

Privacy Statement
Copyright 2010, SecurityFocus