CAPEC-331
ICMP IP Total Length Field Probe
2014-06-23
00h00 +00:00
00h00 +00:00
特定のCAPECのアラート
特定のCAPECの変更情報をいち早くお届けします。
CAPEC の説明
An adversary sends a UDP packet to a closed port on the target machine to solicit an IP Header's total length field value within the echoed 'Port Unreachable" error message. This type of behavior is useful for building a signature-base of operating system responses, particularly when error messages contain other types of information that is useful identifying specific operating system responses.
CAPEC の情報
前提条件
The ability to monitor and interact with network communications. Access to at least one host, and the privileges to interface with the network interface card.必要なリソース
A tool capable of sending/receiving UDP datagram packets from a remote system to a closed port and receive an ICMP Error Message Type 3, "Port Unreachable."関連する弱点
| 弱点名 | |
|---|---|
CWE-204 |
Observable Response Discrepancy The product provides different responses to incoming requests in a way that reveals internal state information to an unauthorized actor outside of the intended control sphere. |
参考文献
REF-33
Hacking Exposed: Network Security Secrets & SolutionsStuart McClure, Joel Scambray, George Kurtz.
REF-123
RFC792 - Internet Control Messaging ProtocolJ. Postel.
http://www.faqs.org/rfcs/rfc792.html
REF-124
RFC1122 - Requirements for Internet Hosts - Communication LayersR. Braden, Ed..
http://www.faqs.org/rfcs/rfc1122.html
REF-262
A Remote Active OS Fingerprinting Tool using ICMPOfir Arkin.
http://ofirarkin.files.wordpress.com/2008/11/login.pdf
登録情報
| 名前 | 組織 | 日付 | リリース日 |
|---|---|---|---|
| CAPEC Content Team | The MITRE Corporation |
変更履歴
| 名前 | 組織 | 日付 | コメント |
|---|---|---|---|
| CAPEC Content Team | The MITRE Corporation | Updated Attack_Motivation-Consequences, Attack_Prerequisites, Description Summary, Related_Attack_Patterns, Resources_Required, Typical_Likelihood_of_Exploit | |
| CAPEC Content Team | The MITRE Corporation | Updated Description, Description Summary | |
| CAPEC Content Team | The MITRE Corporation | Updated Description, Extended_Description | |
| CAPEC Content Team | The MITRE Corporation | Updated Related_Weaknesses, Resources_Required |
