bugtraq - Bypassing ISA Server 2004 with IPv6

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [thread-next>] [day] [month] [year] [list]

Date: 3 Apr 2006 15:08:55 -0000
From: Romain.Le.Guen@...ainl.com
To: bugtraq@...urityfocus.com
Subject: Bypassing ISA Server 2004 with IPv6

When IPv6 is active on an interface of an ISA Server 2004, it seems that IPv6 packets are not filtered and bypass the firewall.

I try to send an ICMP IPv4 packet through the network to ISA Server, this packet was dropped, then i try an ICMP IPv6 packet which successfully works !

The same kind of test was successfull with a TCP connection using IIS 6 and IPv6.

Romain Le Guen