CAPEC-332
ICMP IP 'ID' Field Error Message Probe
Medio
Bajo
Stable
2014-06-23
00h00 +00:00
00h00 +00:00
2023-01-24
00h00 +00:00
00h00 +00:00
Alerta para un CAPEC
Manténgase informado sobre cualquier cambio en un CAPEC específico.
Descripciones CAPEC
An adversary sends a UDP datagram having an assigned value to its internet identification field (ID) to a closed port on a target to observe the manner in which this bit is echoed back in the ICMP error message. This allows the attacker to construct a fingerprint of specific OS behaviors.
Informaciones CAPEC
Prerrequisitos
The ability to monitor and interact with network communications. Access to at least one host, and the privileges to interface with the network interface card.Recursos requeridos
A tool capable of sending/receiving UDP datagram packets from a remote system to a closed port and receive an ICMP Error Message Type 3, "Port Unreachable."Debilidades relacionadas
| Nombre de la debilidad | |
|---|---|
CWE-204 |
Observable Response Discrepancy The product provides different responses to incoming requests in a way that reveals internal state information to an unauthorized actor outside of the intended control sphere. |
Referencias
REF-33
Hacking Exposed: Network Security Secrets & SolutionsStuart McClure, Joel Scambray, George Kurtz.
REF-123
RFC792 - Internet Control Messaging ProtocolJ. Postel.
http://www.faqs.org/rfcs/rfc792.html
REF-124
RFC1122 - Requirements for Internet Hosts - Communication LayersR. Braden, Ed..
http://www.faqs.org/rfcs/rfc1122.html
REF-262
A Remote Active OS Fingerprinting Tool using ICMPOfir Arkin.
http://ofirarkin.files.wordpress.com/2008/11/login.pdf
Envío
| Nombre | Organización | Fecha | Fecha de lanzamiento |
|---|---|---|---|
| CAPEC Content Team | The MITRE Corporation |
Modificaciones
| Nombre | Organización | Fecha | Comentario |
|---|---|---|---|
| CAPEC Content Team | The MITRE Corporation | Updated Attack_Motivation-Consequences, Attack_Prerequisites, Description Summary, Related_Attack_Patterns, Resources_Required, Typical_Likelihood_of_Exploit | |
| CAPEC Content Team | The MITRE Corporation | Updated Description, Description Summary | |
| CAPEC Content Team | The MITRE Corporation | Updated Description, Extended_Description | |
| CAPEC Content Team | The MITRE Corporation | Updated Related_Weaknesses, Resources_Required |
