North American Network Operators Group
Date Prev | Date Next | Date Index | Thread Index | Author Index | Historical

Re: TCP/BGP vulnerability - easier than you think

  • From: Todd Vierling
  • Date: Wed Apr 21 11:43:28 2004 
On Wed, 21 Apr 2004, David Luyer wrote:

: > You missed the "(assuming the attacker can accurately guess both
: > ports)" part.

: A significant number of BGP sessions will be with a source
: port of 11000, 11001 or 11002; BGP sessions are generally
: quite stable and Cisco routers start the source port at
: 11000.

If true, *that* would be a security risk in Cisco's port selection
algorithm.  Many modern OS's do not do simple sequential allocation of
ports, making this point invalid.

-- 
-- Todd Vierling <[email protected]> <[email protected]>