------- Forwarded message follows -------
Date sent: Wed, 25 Oct 2000 17:09:42 -0400
Send reply to: John Duksta <[email protected]>
From: John Duksta <[email protected]>
Organization: Genuity
Subject: Re: VPN hijacking
Originally to: "Wertheimer, Ishai" <[email protected]>
To: [email protected]
Ishai,
While I haven't seen an incident of it. Yes, this could happen.
A machine could be trojaned with BO2k or Netbus and the private
network being accessed via the VPN could be accessed by the
attacker.
However in defense of this kind of attack, most VPN clients include
a
'blocking' mode that will not allow any other traffic to the client
while the VPN is active.
I know this is pedantic, but I would be reluctant to call this
kind of attack a "VPN hijack". Technically, a VPN hijack would
require you to takeover the data stream of the VPN itself and
insert yourself in that way, which would be rather difficult.
Regards,
-john
"Wertheimer, Ishai" wrote:
>
> Hi,
>
> Did any of you come across an incident of VPN hijacking?
> Theoretically, if I use an unprotected client to access the VPN, if
> someone hacks into my client PC, he can hijack the session. Did this
> ever happen ?
>
> Thanks,
>
> Ishai Wertheimer
------- End of forwarded message -------
generated by msg2page 0.06 on Jul 21, 2006 at 19:05:01
search: