Windows 2003 and XP vulnerable to LAND DoS attack

LAND attack:
Sending TCP packet with SYN flag set, source and destination IP address and source and destination port as of destination machine, results in 15-30 seconds DoS condition.

Which is funny. The last time the LAND attack was seen was about 8 years ago. It’s a trivial remote DoS and you’d think that even basic QA would check for something like this.

Securityfocus has the Bugtraq posting:
http://www.securityfocus.com/archive/1/392354/2005-03-02/2005-03-08/0

No patch out yet, joy!

Michiel

 michielkalkman@gmail.com