[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]
Message-ID: <1331334081.30207.11.camel@tiger.regit.org>
Date: Sat, 10 Mar 2012 00:01:21 +0100
From: Eric Leblond <eric@...it.org>
To: oss-security@...ts.openwall.com
Subject: Re: Attack on badly configured Netfilter-based
firewalls
Hello,
On Mon, 2012-02-27 at 14:46 +0100, Eric Leblond wrote:
> Hello,
>
> On Mon, 2012-02-27 at 05:25 +0400, Solar Designer wrote:
> > Eugene, all -
> >
> > On Mon, Feb 27, 2012 at 09:19:59AM +0800, Eugene Teo wrote:
...
> e it to Eric much earlier),
> > Eric would post to the list e.g. in January and ask for the issue to be
> > kept private until March - thereby violating the list's maximum embargo
> > period.
The slides and videos of my CansecWest talk are available:
http://home.regit.org/2012/03/playing-with-network-layers-to-bypass-firewalls-filtering-policy/
I've done a complete description of the attack and also demonstrate the
need to be careful with the use of helpers.
BR,
--
Eric Leblond
Blog: http://home.regit.org/
Download attachment "signature.asc" of type "application/pgp-signature" (199 bytes)
Powered by blists - more mailing lists
Please check out the
Open Source Software Security Wiki, which is counterpart to this
mailing list.
Confused about mailing lists and their use?
Read about mailing lists on Wikipedia
and check out these
guidelines on proper formatting of your messages.
