Проблема с ipchains под Debian Linux.

С помощью больших ICMP-пакетов можно вывести из строя машину на которой работает ipchains...

ipchains_patch.txt

Subject: Linux 2.2.10 ipchains Advisory To: [email protected] Linux ipchains Firewall Vulnerability data protect GmbH - Advisory 2 July 27, 1999 Authors: Thomas Lopatic John McDonald Overview -------- data protect has discovered a potential vulnerability in the Linux ipchains firewall...

CVE-1999-1018

IPChains in Linux kernels 2.2.10 and earlier does not reassemble IP fragments before checking the header information, which allows a remote attacker to bypass the filtering rules using several fragments with 0 offsets...