Flaw found in VPN crypto security

TalkBack 4 of 5:

Next »

« Previous

• Thread View
• Flat View

Just another IPSec flaw...

The possible modification of IPSec encapsulated payloads is a serious threat. But for this attack, you must not only intercept the ESP packets but modify them too. Not so an easy task because such a intermitent connection hijack mean to gain control over a router or attacking core routing protocols.

Modifying IPSec payload do not limit to information diclosures but should help for DOS attacks and more. Everybody using IPSec should set up another VPN solution. Linux based routers help a lot.

What is too rigid break-in one day or the other, protocols like anything else.

Posted by: failover   Posted on: 05/13/05 You are currently: a Guest | Members login | Terms of Use

Alert moderator to an offensive message

Subscribe to this discussion via Email or RSS

SponsoredWhite Papers, Webcasts, and Downloads

• Gartner Webcast: Data Loss Prevention, Compliance Trends Trend Micro The regulatory environment is changing. Find out what companies need to ... Download Now
• Data Leak Assessment Trend Micro The Trend Micro Data Leak Assessment Practice, developed by Trend ... Download Now
• Finally, an Easier Way for Small and Mid-Sized Companies to Run Their Business Applications: IBM Smart Business IBM From the PC to the Internet to every piece of hardware and software in ... Download Now