TCP Vulnerability

[Stealth]

There has apparently been discovered a vulnerability in the TCP protocol. (SlashDot readers will know this fairly soon if they don't already. )

US-CERT document:
http://cert.gov/cas/techalerts/TA04-111A.html

British NISCC Vulnerability Advisory:
http://www.uniras.gov.uk/vuls/2004/236929/index.htm

This could get ugly. (Could this get ugly?)

[Banana fanna fo fanna]

I thought guessing sequence numbers was an old thing?

[iago]

I thought guessing sequence numbers was an old thing?

If that's the same thing I recently read, it can be done without guessing sequence numbers.  All you need to know is the source/dest port/ip.

[iago]

This could get ugly. (Could this get ugly?)

I don't think so, from what I've seen you rarely know the necessary ports, and even if you do most connections could be remade anyway.  I don't see this being much of a problem.

[Stealth]

Ah well. It's newsworthy, anyways. =)