CAPEC-330: ICMP Error Message Echoing Integrity Probe

Detailed Stable 严重程度: Low 攻击可能性: Medium

CAPEC版本: 3.9

更新日期: 2023-01-24

攻击模式描述

An adversary uses a technique to generate an ICMP Error message (Port Unreachable, Destination Unreachable, Redirect, Source Quench, Time Exceeded, Parameter Problem) from a target and then analyze the integrity of data returned or "Quoted" from the originating request that generated the error message.

前提条件

  • The ability to monitor and interact with network communications.Access to at least one host, and the privileges to interface with the network interface card.

所需资源

  • A tool capable of sending/receiving UDP datagram packets from a remote system to a closed port and receive an ICMP Error Message Type 3, "Port Unreachable..

后果影响

影响范围: Confidentiality

技术影响: Read Data

影响范围: Confidentiality Access Control Authorization

技术影响: Bypass Protection Mechanism

关键信息

CAPEC ID: CAPEC-330

抽象级别: Detailed

状态: Stable

典型严重程度: Low

攻击可能性: Medium

相关攻击模式
相关CWE弱点