4 ms·
Can you explain how ICMP is insecure? Is it just ping being exploited?
by georgerobinson 11y ago
Can you explain how ICMP is insecure? Is it just ping being exploited?
- MichaelCrawford 11y agoThe kernel doesn't pass ICMP packets through to userspace.
- georgerobinson 11y agoI see. But why is this a security threat?
- MichaelCrawford 11y agoyhbt
- KaiserPro 11y agoI'm not sure of the specific reasons in this case. I think it was to do with possible internal host discovery. (I'm not sure how that would work in practice. Yes you can use traceroute, but I'm not sure how that would work behind nat, without forcing a client to open up a port first) Possibly its to do with worry about smurf attacks, but then most firewalls > 2004 should deal with that gracefully.(old company though...) Have a look here, its an easy read and has a nice list: http://resources.infosecinstitute.com/icmp-attacks/ http://resources.infosecinstitute.com/icmp-attacks/
- scurvy 11y agoICMP can be used to affect routing on insecurely configured hosts. That might be an exploit vector? Circa 1995-97 there was the ping of death....but that was 20 years ago. Most of these security best practices are like building code. They get written down and are never updated. For example, showers need a 2" drain pipe but tubs only need 1.5". The theory was that a backed up drain would flood a bathroom with a lower shower rim very quickly. It would take much longer with a tub (higher side wall). No one ever bothered to update the regulations once we stopped allowing 5 gpm showerheads. There's no reason put into it. Just "nope it says 2" required b/c we've always required 2"." "Why?" "Because that's how it is." Same way with computer security.
- gonzo 11y ago"Code is not prescription."