Slashdot Mirror
Windows 2003 and XP SP2 Vulnerable To LAND Attack
An anonymous reader writes "Dejan Levaja, a Serbian security engineer has discovered that nearly 8 years after the attack was first made public, WIndows 2003 and Windows XP SP2 are in fact vulnerable to the historic LAND attack." Granted, you need to have the firewall turned off for this work, but there's a whole lotta machines that don't have it turned on.
It is also subject to sea and air attacks.
In other news, my computer is also prone to failing if I microwave it... hit it with a hammer, or attempt to install water cooling while I'm drunk...
---
Programming is like sex... Make one mistake and support it the rest of your life.
Only one remote hole in the kernel FOR eight years!
You mean to tell me that XP and 2k3 contain buggy legacy code? that IS news!
The pirates come by sea, not LAND.
Amazing, if I don't use I firewall, I'm vulnerable. Who would have thought?
E = m c^3 Don't drink and derive E = m c^3
Regression testing makes sure that things that used to work in the old version still works in the new version, so I'd say that windows is passing its regression tests with flying colors ;)
It may be a little thing called a firewall. A firewall is a spyware-like little piece of software that constantly pings a special server called a firedoor so that spammers hackers, and their ilk know when your computer is available on the internet. Unfortuntely Microsoft refuses to release a patch for this thing but a piece of software called a backdoor can be used to prevent the firewall from doing its dirty work. Download one today!
01 if by LAND, 10 if by SEA
Windows is one of the safest OS around (and to keep it that way it is advised that the computer should not be connected to internet or any other network for that matter)
fuvoo: watch something
Microsoft was informed 7 days ago (25.02.2005, GMT +1, local time), NO answer received, so I decided to share this info with security community.
Of course they didn't reply. They're under LAND attack, and your message is caught in the server. You must have sent them a proof-of-concept, so what did you expect?
"It's the height of ridiculousness to say for those 9 lines you get hundreds of millions."
8 years is hardly enough to figure out how to patch windows.
Besides, like all everyone here says, it is the users own fault for not using a firewall. Having an expectation that 8 yr old attacks should be fixed is just unreasonable.
WTF, are you all on crack?
I remember the days of Ping of Death, Land, Teardrop, New Tear, Bork, etc.
Now that my WinXP SP2 system is susceptible to land again, it's getting me into a nostalgic mood. I think I'll go play Ms PacMan on my MAME cabinet now.
I'm a big tall mofo.
Just remember that these people running 2003/XP without a firewall would also be running *NIX with a root password of "password". Mine is 12345
The server has been slashdotted... guess it wasn't such a bad idea after all. Now fewer people can get to that file :)
Windows Server must be running some services, I guess..
Experts say servers are vulnerable to the infamous CAFE attack. One drop can take down an entire network!
Granted you have to have a computer next to a cup of coffee for this to work, but MANY PEOPLE DO!!!!!!!!!!
If Nalgene water bottles are outlawed, only outlaws will have Nalgene water bottles.
Vizzini: You only think I guessed wrong - that's what's so funny. I switched glasses when your back was turned. Ha-ha, you fool. You fell victim to one of the classic blunders, the most famous of which is "Never get involved in a land war in Asia", but only slightly less well known is this: "Never go in against a Sicilian, when *death* is on the line.". Hahahahahah. [Vizzini falls over dead]
(Yeah, off topic, I don't care.)
Oh, regression tests! Those things! Bill Gates thought they were just funny-looking packing peanuts and threw them out.
It's a small world and it smells funny; I'd buy another if it wasn't for the money; Take back what I paid (SoM)
Or even "You're not using contractions properly, KDN"?
Being a military type, I would assume that yes, most computers are vulnerable to the majority of conventional land-based assualts. This is due more to physics than software.
Just 5 minutes before I read this post, I turned firewall on my WinXP SP2 machine off, testing someting on our LAN.
Can you imagine what amount of fear I felt when I realized that this guy lived only 2 miles from my office...
No sig today.
Since that site appears to be slashdotted, google turned up another one..
Might as well take down both of them, right?
Note to ACs: I usually delete AC replies without reading them. If you want to talk to me, log in.
OS X is invulnerable to all attacks, because it's made of magic.
*snort*. You owe me a new keyboard.
Help save the critically endangered Blue Iguana
... backwards-compatibility.
Let's see OSS match this! A bug, almost a decade old, STILL SUPPORTED!