Full Disclosure mailing list archives
Re: SLAAC Attack - 0day Windows Network Interception Configuration Vulnerability
From: Valdis.Kletnieks () vt edu
Date: Mon, 04 Apr 2011 12:17:09 -0400
On Mon, 04 Apr 2011 10:34:51 CDT, Adam Behnke said:
InfoSec Institute security researcher Alec Waters has just released a new article on SLAAC Attacks. The basic premise is to use the default network configuration found on all Windows 7 (as well as Server 2008, Vista) installations to intercept and hijack all network traffic without any user knowledge or interaction.
Please read RFC4862, section 6, Security Considerations. Nothing actually new here, unless you've found issues above and beyond the ones mentioned in that RFC.
Attachment:
_bin
Description:
_______________________________________________ Full-Disclosure - We believe in it. Charter: http://lists.grok.org.uk/full-disclosure-charter.html Hosted and sponsored by Secunia - http://secunia.com/
Current thread:
- SLAAC Attack - 0day Windows Network Interception Configuration Vulnerability Adam Behnke (Apr 04)
- Re: SLAAC Attack - 0day Windows Network Interception Configuration Vulnerability Valdis . Kletnieks (Apr 04)
- <Possible follow-ups>
- Re: SLAAC Attack - 0day Windows Network Interception Configuration Vulnerability ascii (Apr 04)