Re: IP Spoofing with DHCP ?

["Matthew S. Hallacy" <mhallacy () MERCURY XTRATYME COM>]

You could just as easily (as the attacker) set your IP staticly.


                        -poptix

On Mon, 18 Sep 2000, Skreel wrote:

> Hi I have a question concerning the DHCP protocol. I've heard that
> this protocol could allow a user to choose he's own IP address if it
> isn't already assigned to another user. I was wondering if a network
> using DHCP to assign IP addresses and authenticating users upon
> their IP address could lead to a breach (i know authentication upon
> IP address has never been a good security) but in theory would it be
> possible for an attacant to DoS a user's box and then spoof his IP
> before the ping timeout in order to be authentified as the user ?
>
> Thanks for the help