bugtraq - Re: Bypassing ISA Server 2004 with IPv6

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <Pine.LNX.4.64.0604051207220.27173@shalla.de>
Date: Wed, 5 Apr 2006 12:12:10 +0200 (CEST)
From: Christine Kronberg <seeker@...lla.de>
To: bugtraq@...urityfocus.com
Subject: Re: Bypassing ISA Server 2004 with IPv6

On Tue, 4 Apr 2006, 3APA3A wrote:

> Dear Romain.Le.Guen@...ainl.com,
>
> Neither  ISA  Server  2004  nor Windows 2003 Basic Firewall support IPv6
> filtering, IPX filtering, etc. This is different network protocol.

   That's no excuse for letting IPv6 packets pass the firewall.
   If I understand correctly this means that the internal LAN
   is open for any attacks as long as they are IPv6 based. If that
   is right, this is an extremly nasty bug. If ISA Server 2004
   and Windows 2003 Basic Firewall cannot filter that stuff it
   should simply drop it.

   Cheers,

   Chris Kronberg.