CAPEC Definitions

    CAPEC Definitions / CAPEC-328

    CAPEC-328: TCP 'RST' Flag Checksum Probe

    This OS fingerprinting probe performs a checksum on any ASCII data contained within the data portion or a RST packet. Some operating systems will report a human-readable text message in the payload of a 'RST' (reset) packet when specific types of connection errors occur. RFC 1122 allows text payloads within reset packets but not all operating systems or routers implement this functionality.

    Severity:Low
    Possibility:Medium

    Extended Description

    No Extended Description.

    Mitigations

    No Mitigations found.

    Relationships with other CAPECs

    CAPEC-312: Active OS Fingerprinting

    Details

    Prerequisites

    The ability to monitor and interact with network communications.Access to at least one host, and the privileges to interface with the network interface card.

    Related Weaknesses

    CWE-200: Exposure of Sensitive Information to an Unauthorized Actor

    Details