Important Notice: Our web hosting provider recently started charging us for additional visits, which was unexpected. In response, we're seeking donations. Depending on the situation, we may explore different monetization options for our Community and Expert Contributors. It's crucial to provide more returns for their expertise and offer more Expert Validated Answers or AI Validated Answers. Learn more about our hosting issue here.

What are giant packets? Or, is Windows NT susceptible to the PING attack?

April 26, 2017Attack giant NT packets ping susceptible Windows

0

Posted

What are giant packets? Or, is Windows NT susceptible to the PING attack?

1 Answer

0

Posted

There are mixed reports whether or not NT is vulnerable to this attack. By using ping to send a large packet to certain systems, they might hang or crash. Windows NT 3.51 seem to be vulnerable to this attack. A knowledge base article, Q132470, describes symptoms in Windows NT 3.51, and also include a pointer to a patch for this problem Check out Mike Bremford’s Ping o’ Death web page (http://www.sophist.demon.co.uk/ping) for more information on what systems are vulnerable and how. Update: The PoD site has moved to http://prospect.epresence.com/ping, which doesn’t seem to exist in the DNS for the moment. There is a PoD II, which utilizes a bug in the way Microsofts IP-stack assembles fragmented IP packets. See $$$: Q154174 – Invalid ICMP Datagram Fragments Hang Windows NT, Windows95 There is a fix for this, both NT4 and NT3.51, released in July 1997: • NT4 icmp-fix (ftp://ftp.microsoft.com/bussys/winnt/winnt-public/fixes/usa/nt40/hotfixes-postSP3/icmp-fix). • NT3.51 icmp-fix (ftp://ftp.