This seems a security issue to me - you can have a backdoor listening on
SCTP and it won't show in netstat. And even established connections -
like a file transfer or shell.

Red Hat & SuSE have had SCTP patches in their netstat flavors for years.
And the debian bug has patches. What's the holdup?

Simple tests:

netsend sctp receive (opens a listening socket on port 6666)
socat SCTP-LISTEN:8080 TCP-CONNECT:localhost:22 (proxies ssh on sctp/8080)

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/174858

Title:
  'netstat' doesn't check for sockets using SCTP protocol

-- 
ubuntu-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

Reply via email to