含光混世贵无名,孤高何用比云月
land

查询结果如下:

详细条目 英文搜索 <<快速查询:
A LAND (local area network denial) attack is a DoS (denial of service) attack that consists of sending a special poison spoofed packet to a computer, causing it to lock up. The security flaw was first discovered in 1997 by someone using the alias “m3lt”, and has resurfaced many years later in operating systems such as Windows Server 2003 and Windows XP SP2.


For other uses, see Land (disambiguation).

A LAND (local area network denial) attack is a DoS (denial of service) attack that consists of sending a special poison spoofed packet to a computer, causing it to lock up. The security flaw was first discovered in 1997 by someone using the alias 'm3lt', and has resurfaced many years later in operating systems such as Windows Server 2003 and Windows XP SP2.



Mechanism


The attack involves sending a spoofed TCP SYN packet (connection initiation) with the target host's IP address to an open port as both source and destination. This causes the machine to reply to itself continuously. It is, however, distinct from the TCP SYN Flood vulnerability.
Other LAND attacks have since been found in services like SNMP and Windows 88/tcp (kerberos/global services). Such systems had design flaws that would allow the device to accept request on the wire appearing to be from themselves, causing repeated replies.


Vulnerable systems


Below is a list of vulnerable operating systems:



Prevention


Most firewalls should intercept and discard the poison packet thus protecting the host from this attack. Some operating systems released updates fixing this security hole.


简典