[ale] NFR

Thu Sep 2 14:43:50 EDT 1999

--------------B650134EBECF749734BA5367
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 7bit

I guess they are a year or so behind on updating their webpage.
Thanks,
Russell

Jacob Langseth wrote:

> >      Linux does not properly handle interfaces in promiscuous mode.  It
> > fails to it fails to distinguish packets addressed to it from packets
> > addressed to other
> >      machines. This means that you can subvert the Linux system in
> > various ways:
> >           Other systems on the network can detect Linux based sniffers
> > by looking for responses to requests sent to the wrong MAC address.  The
>
> > === END CUT ===
> >
> > Has this been fixed in the 2.2 kernel?
>
> To the best of my knowledge, this was fixed Sept98.  Ref:
>
> http://www.securityfocus.com/templates/archive.pike?list=1&date=1998-09-15
> &msg=m0zKDQU-000aR3C at the-village.bc.nu
>
> --
> Jacob Langseth
> http://www.vodavi.com/  <jlangseth at vodavi-ct.com>

--
Russell T. Enderby                                        Arris Interactive
Software Engineer                                         3871 Lakefield Dr,
Suite 300
Cornerstone Software Development Group   Suwanee, GA 30024-1242
Email: Russell.Enderby at arris-i.com               Phone: 770-622-8490

--------------B650134EBECF749734BA5367
Content-Type: text/html; charset=us-ascii
Content-Transfer-Encoding: 7bit

</pre>
<HTML>
I guess they are a year or so behind on updating their webpage.
 Thanks,
 Russell

Jacob Langseth wrote:
<BLOCKQUOTE TYPE=CITE>> Linux does not properly
handle interfaces in promiscuous mode. It
 > fails to it fails to distinguish packets addressed to it from packets
 > addressed to other
 > machines. This means that you can subvert
the Linux system in
 > various ways:
 > Other
systems on the network can detect Linux based sniffers
 > by looking for responses to requests sent to the wrong MAC address. 
The

<P>> === END CUT ===
<BR>>
<BR>> Has this been fixed in the 2.2 kernel?

To the best of my knowledge, this was fixed Sept98. Ref:

<P>http://www.securityfocus.com/templates/archive.pike?list=1&date=1998-09-15
<BR>&msg=m0zKDQU-000aR3C at the-village.bc.nu

<P>--
<BR>Jacob Langseth
<BR>http://www.vodavi.com/  <jlangseth at vodavi-ct.com></BLOCKQUOTE>

--
 Russell T. Enderby 
Arris Interactive
 Software Engineer 
3871 Lakefield Dr, Suite 300
 Cornerstone Software Development Group Suwanee, GA 30024-1242
 Email: Russell.Enderby at arris-i.com 
Phone: 770-622-8490
 </HTML>

--------------B650134EBECF749734BA5367--