CVE-1999-0016

Step 1: Packet Crafting: The attacker crafts a TCP SYN packet.

Step 2: Identical Source/Destination: The crafted packet is configured with the same source and destination IP address and port number.

Step 3: Packet Transmission: The attacker sends the malformed packet to the target system.

Step 4: Target Processing: The target system receives the packet and attempts to process it.

Step 5: Resource Exhaustion: The target system, due to the identical source and destination, enters a state of resource exhaustion, potentially leading to a denial of service.

Root Cause: The Land Attack exploits a vulnerability in the TCP/IP stack's handling of packets where the source and destination IP address and port are identical. When a crafted TCP SYN packet is sent with the same source and destination IP and port, the target system attempts to establish a connection with itself. This can lead to an infinite loop or resource exhaustion, as the system may repeatedly try to respond to the malformed packet, consuming CPU cycles and network bandwidth. The specific flaw lies in the lack of proper validation or filtering of packets with identical source and destination information, leading to a denial of service. This is not a buffer overflow or race condition in the traditional sense, but rather a logic flaw in packet processing.