Ping off Death

A ping off death (ping of dead) is an computer attack which consists in sending a Ping of which the length of data is higher than the normally authorized maximum size (65535 bytes). At the time of its sending, the ping off death is fragmented in several packets smaller in order to conform to the authorized maximum size. The computer victim which receives these packets must then be given the responsability to reassemble them in order to recover the ping. Unfortunately, certain systems do not manage (or badly) this fragmentation, and are blocked, or crashent completely while testing. From where the name of this attack.

In theory, no matter who can cause an attack ping off death, since it has a software making it possible to change the size of the packages ICMP ping.

Consequences

Crash of the machine
Blocage of the system targets

How to protect itself some?

To update the operating system
To carry out a checking yourself before someone else does not do it in your place. If the system reacts correctly, there is no problem, if not, it is time to update.

External bond

http://www.securiteinfo.com/attaques/hacking/pingdeath.shtml

Random links: