Re: TCP RST attacks and Windows Servers

From: Doug Sherman [MVP] (dsherman_at_nospam.tampabay.rr.com)
Date: 04/22/04


Date: Thu, 22 Apr 2004 00:00:58 -0400

Windows routing does not natively support BGP. However, Windows networks
may employ BCP capable routers and the API could provide support for BGP
written by third party vendors. See:

http://msdn.microsoft.com/library/default.asp?url=/library/en-us/dnw2kmag00/html/Redundant2.asp

Doug Sherman
MCSE Win2k/NT4.0, MCSA, MCP+I, MVP

"baillard" <baillard@hotmail.com> wrote in message
news:er5skH%23JEHA.3924@tk2msftngp13.phx.gbl...
> I have not seen anything yet from Microsoft about the TCP RST possible
> attacks that are detailed in the following bulletins:
>
> Technical Cyber Security Alert TA04-111A
> Vulnerabilities in TCP
> http://www.us-cert.gov/cas/techalerts/TA04-111A.html
>
> SANS
>
http://isc.incidents.org/diary.php?date=2004-04-20&isc=9a4c61bc294b1039c8ecacff03534c2c
> CVE entry: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2004-0230
> Cisco announcement:
> http://www.cisco.com/warp/public/707/cisco-sa-20040420-tcp-ios.shtml
>
> If I understand correctly, an attack would affect any long term session
TCP
> communications. Since Windows Server 2003 and 2000 running as Domain
> Controllers are not supported using IPSEC (one mentioned work around),
what
> possible attacks will we be facing in the future? Does standard Windows
> networking (SMB) depend on this kind of communication? Can a Windows box
> setup to do routing (I don't remember if RRAS supports BGP) be affected by
> these kinds of attacks?
>
>



Relevant Pages

  • Re: TCP RST attacks and Windows Servers
    ... Windows routing does not natively support BGP. ... > attacks that are detailed in the following bulletins: ...
    (microsoft.public.windows.server.security)
  • SecurityFocus Microsoft Newsletter #223
    ... is a free service that gives you the ability to track and manage attacks. ... 3Com 3CDaemon Multiple Remote Vulnerabilities ... Windows Update Services ... Relevant URL: http://www.securityfocus.com/bid/12148 ...
    (Focus-Microsoft)
  • Re: Problem with slower startup of XP windows SP3
    ... Help and Support for details. ... The Panda Anti-virus Service has started successfully. ... The Windows Security Center Service has started. ... The local computer may not have the necessary registry information or message ...
    (microsoft.public.windowsxp.general)
  • Re: Problem with slower startup of XP windows SP3
    ... Event Viewer reports renders interpretation infinitely more difficult. ... see Help and Support Center at ... "Event Viewer in windows: ... Log on as an user with administrative rights and open Internet Explorer ...
    (microsoft.public.windowsxp.general)
  • Re: SP3 potential problem
    ... Where did you download the ATI drivers from? ... Select Start, Help and Support, Keep your Windows up- to-date with Windows Update, Review your Update History you can see the update. ... I have not been able to download Net Framework ...
    (microsoft.public.windowsxp.basics)