Re:Critical: Vulnerabilities in Windows TCP/IP Could Allow R...
by cturner on Thursday September 10, 2009 @11:37AM
(#815440)
Does the vulnerability stretch back into any of the BSDs it was forked from? :)
[ Parent
| on HN ]
Re:Critical: Vulnerabilities in Windows TCP/IP Could Allow R...
by cperciva on Thursday September 10, 2009 @02:00PM
(#815789)
Good question -- but I have to say "almost certainly not", for two reasons.
First, I haven't had any email from Microsoft about this -- and for all that Microsoft has a reputation for being bad at security and not supporting open source software, they do take their responsibilities seriously when it comes to inter-vendor coordination.
Second, the details I've seen relating to this suggest that it relates to connection hashing -- which is relatively new, and thus is unlikely to involve code from the BSD stack which Microsoft imported so many years ago.
Re:Critical: Vulnerabilities in Windows TCP/IP Could Allow R...
by spamizbad on Thursday September 10, 2009 @12:09PM
(#815515)
Actually unlike the previous TCP/IP stack I believe the Vista/Win7/Serv2008 stack is new from the ground-up.
Re:Critical: Vulnerabilities in Windows TCP/IP Could Allow R...
by _ck_ on Thursday September 10, 2009 @12:15PM
(#815533)
They rewrote it so carefully that they duplicated the same teardrop bug they created back in windows 3.1/95 and didn't fix for half a decade.
Re:Critical: Vulnerabilities in Windows TCP/IP Could Allow R...
by wglb on Thursday September 10, 2009 @11:51AM
(#815470)
Now that is almost mean.
Re:Critical: Vulnerabilities in Windows TCP/IP Could Allow R...
by cperciva on Thursday September 10, 2009 @02:01PM
(#815790)
As FreeBSD Security Officer I don't see anything unreasonable about that question -- it's the first thing which occurred to me, too.