PDA

View Full Version : Possible attacks against VPN & intranet



Renk
12.06.09, 03:57
RFC1918 Caching Security Issues

By Robert Hansen
Date: 08/06/2009

Preface: Intranets are intended to be secured from the outside by way of firewalls and other networking devices. Unfortunately, there has been a move towards non-routable address space as a method of protection, rather than other methods of protecting private IP space. This paper will outline a number of flaws that can be exploited by an adversary because of the use of well known non-routable IP address spaces.

SecTheory - Internet Security (http://www.sectheory.com/rfc1918-security-issues.htm)