|
NISCC Vulnerability Advisory - IPSEC |
|
|
Eric_the_Red writes "UNIRAS Alert 15/05 - NISCC
Three attacks that apply to certain configurations of IPsec have been identified. These
configurations use Encapsulating Security Payload (ESP) in tunnel mode with confidentiality only,
or with integrity protection being provided by a higher layer protocol. Some configurations using
AH to provide integrity protection are also vulnerable. In these configurations, an attacker can
modify sections of the IPsec packet, causing either the cleartext inner packet to be redirected or
a network host to generate an error message. In the latter case, these errors are relayed via the
Internet Control Message Protocol (ICMP); because of the design of ICMP, these messages directly
reveal segments of the header and payload of the inner datagram in cleartext. An attacker who can
intercept the ICMP messages can then retrieve plaintext data. The attacks have been implemented and demonstrated to work under realistic conditions.
"
|
|
|
 |
| "NISCC Vulnerability Advisory - IPSEC" | Login/Create an Account | 0 comments |
|
| | The comments are owned by the poster. We aren't responsible for their content. |
|
|
|
No Comments Allowed for Anonymous, please register |
|
| |
|
Login |
|
 |
|
|
|
|
· New User? · Click here to create a registered account.
|
|
|
Article Rating |
|
|
|
|
|
|
Average Score: 0
Votes: 0
|
|
|
