News for hackers. Stuff that matters.
Re:Critical: Vulnerabilities in Windows TCP/IP Could Allow R... by cturner on Thursday September 10, 2009 @11:37AM (#815440)
Does the vulnerability stretch back into any of the BSDs it was forked from? :)
Re:Critical: Vulnerabilities in Windows TCP/IP Could Allow R... by cperciva on Thursday September 10, 2009 @02:00PM (#815789)
Good question -- but I have to say "almost certainly not", for two reasons.

First, I haven't had any email from Microsoft about this -- and for all that Microsoft has a reputation for being bad at security and not supporting open source software, they do take their responsibilities seriously when it comes to inter-vendor coordination.

Second, the details I've seen relating to this suggest that it relates to connection hashing -- which is relatively new, and thus is unlikely to involve code from the BSD stack which Microsoft imported so many years ago.

Re:Critical: Vulnerabilities in Windows TCP/IP Could Allow R... by spamizbad on Thursday September 10, 2009 @12:09PM (#815515)
Actually unlike the previous TCP/IP stack I believe the Vista/Win7/Serv2008 stack is new from the ground-up.
Re:Critical: Vulnerabilities in Windows TCP/IP Could Allow R... by _ck_ on Thursday September 10, 2009 @12:15PM (#815533)
They rewrote it so carefully that they duplicated the same teardrop bug they created back in windows 3.1/95 and didn't fix for half a decade.
Re:Critical: Vulnerabilities in Windows TCP/IP Could Allow R... by wglb on Thursday September 10, 2009 @11:51AM (#815470)
Now that is almost mean.
Re:Critical: Vulnerabilities in Windows TCP/IP Could Allow R... by cperciva on Thursday September 10, 2009 @02:01PM (#815790)
As FreeBSD Security Officer I don't see anything unreasonable about that question -- it's the first thing which occurred to me, too.
Re:Critical: Vulnerabilities in Windows TCP/IP Could Allow R... by wglb on Thursday September 10, 2009 @04:29PM (#816125)
But seriously--if this bug was in BSD, wouldn't we know it already?
Re:Critical: Vulnerabilities in Windows TCP/IP Could Allow R... by cperciva on Thursday September 10, 2009 @05:55PM (#816295)
Not necessarily. Just a few months ago I fixed a serious vulnerability in FreeBSD which had escaped notice for over 13 years.