Citizendia
Your Ad Here

For other uses, see Land. A LAND attack is a DoS (Denial of Service attack that consists of sending a special poison spoofed packet to a computer causing it to lock up

A LAND attack is a DoS (Denial of Service) attack that consists of sending a special poison spoofed packet to a computer, causing it to lock up. In the context of Network security, a spoofing attack is a situation in which one person or program successfully masquerades as another by falsifying data and thereby gaining In Information technology, a packet is a formatted unit of Data carried by a Packet mode Computer network. The security flaw was actually first discovered in 1997 by someone using the alias "m3lt", and has resurfaced many years later in operating systems such as Windows Server 2003 and Windows XP SP2. An operating system (commonly abbreviated OS and O/S) is the software component of a Computer system that is responsible for the management and coordination Windows Server 2003 (also referred to as Win2K3 is a server Operating system produced by Microsoft. Windows XP is a family of 32-bit and 64-bit Operating systems produced by Microsoft for use on Personal computers including home and

Contents

How it works

The attack involves sending a spoofed TCP SYN packet (connection initiation) with the target host's IP address and an open port as both source and destination. The Transmission Control Protocol (TCP is one of the core protocols of the Internet Protocol Suite. The Transmission Control Protocol (TCP is one of the core protocols of the Internet Protocol Suite. An Internet Protocol ( IP) address is a numerical identification ( Logical address) that is assigned to devices participating in a Computer network

The reason a LAND attack works is because it causes the machine to reply to itself continuously.

Definition: "A LAND attack involves IP packets where the source and destination address are set to address the same device. "

Other land attacks have since been found in services like SNMP and Windows 88/tcp (kerberos/global services) which were caused by design flaws where the devices accepted requests on the wire appearing to be from themselves and causing replies repeatedly.

Vulnerable systems

Below is a list of vulnerable operating systems (discovered by testing on various machines):

How to avoid being attacked

Most firewalls should intercept the poison packet thus protecting the host from this attack. Microsoft Windows is a series of Software Operating systems and Graphical user interfaces produced by Microsoft. A firewall is an integrated collection of security measures designed to prevent unauthorized electronic access to a networked computer system Some operating systems released updates fixing this security hole. In addition, routers should be configured with both ingress and egress filters to block traffic where the source IP address is the same as the destination because they should block any source address within the same address space as the destination.

External links

© 2009 citizendia.org; parts available under the terms of GNU Free Documentation License, from http://en.wikipedia.org
 Dapyx Software network: MP3 Explorer | Ebook Manager | Zenithic