Recent TCP/IP Error Affecting IRC/SMTP/HTTP :(

[junkieXL]

Any of our beloved Network Guru's on the forum have any insight to the recent plague of "[10053]-Software caused connection abort" errors that seem to be spreading in virus-esque fashion latley...?

Never had problem like this, every 3 minutes or so, the connection resets itself & the user is inevitably booted off their irc/aol/smtp server...

a most annoying bug that noone seems to have an answer for; and affecting not only broadband users like myself but dialups, DSL & even my T-1 at work.

Thanks in advance ,

JxL

[Swimmer]

Give the link a try... http://support.microsoft.com/default.aspx?scid=http://support.microsoft.com:80/support/kb/articles/Q204/5/94.ASP&NoWebContent=1

This it the actual meaning of this error...

WSAECONNABORTED (10053)

Translation: Software caused connection abort.

Description: An established connection was stopped by the software in your host computer, possibly because of a data transmission time-out or protocol error.

[junkieXL]

Multiple Vendor TCP Sequence Number Approximation Vulnerability

Risk: High

Symantec Advisory:..."A vulnerability in TCP implementations has been reported that may permit unauthorized remote users to reset TCP sessions.

The cause of the vulnerability is that affected implementations will accept TCP sequence numbers within a certain range of the expected sequence number for a packet in the session. This will permit a remote attacker to inject a SYN or RST packet into the session, causing it to be reset "

more info -> http://www.us-cert.gov/cas/techalerts/TA04-111A.html

Microsoft's expectedly-weak response to this was "...Windows Sockets call to recv()/send() returns 10058 (WSAESHUTDOWN) or 10053 (WSAECONNABORTED).

The underlying cause has yet to be determined and remains under investigation..."

bollocks, i say !!!!! -JxL