Security Incidents mailing list archives

Re: VPN hijacking


From: "Michael H. Warfield" <mhw () WITTSEND COM>
Date: Wed, 25 Oct 2000 14:40:23 -0400

On Wed, Oct 25, 2000 at 05:27:09AM -0400, Wertheimer, Ishai wrote:
Hi,

Did any of you come across an incident of VPN hijacking? Theoretically, if I
use an unprotected client to access the VPN, if someone hacks into my client
PC, he can hijack the session. Did this ever happen ?

        If he can hack your client PC why bother hijacking the session.
It's already game over.  He can then just access your VPN through your
compromised client PC.

Thanks,

Ishai Wertheimer

        [silly bloated disclaimer deleted]

        Mike
--
 Michael H. Warfield    |  (770) 985-6132   |  mhw () WittsEnd com
  (The Mad Wizard)      |  (678) 463-0932   |  http://www.wittsend.com/mhw/
  NIC whois:  MHW9      |  An optimist believes we live in the best of all
 PGP Key: 0xDF1DD471    |  possible worlds.  A pessimist is sure of it!


Current thread: