full-disclosure - IPv6 Neighbor Discovery security (new documents)

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [day] [month] [year] [list]

Message-ID: <50CF4D2B.4080704@si6networks.com>
Date: Mon, 17 Dec 2012 13:49:47 -0300
From: Fernando Gont <fgont@...networks.com>
To: "bugtraq@...urityfocus.com" <bugtraq@...urityfocus.com>, 
	Full Disclosure <full-disclosure@...ts.grok.org.uk>
Subject: IPv6 Neighbor Discovery security (new documents)

Folks,

We have published two documents related with IPv6 Neighbor Discovery
security:

1) "Security Assessment of Neighbor Discovery (ND) for IPv6" (IETF
Internet-Draft). Available at:
<http://tools.ietf.org/html/draft-gont-opsec-ipv6-nd-security>

This document contains everything you may want to know about IPv6
Neighbor Discovery security, and more... :-)

Kudos to Marc Heuse, who collaborated in the publication of this document!

2) "Security/Robustness Assessment of IPv6 Neighbor Discovery
Implementations". Available at:
<http://www.si6networks.com/tools/ipv6toolkit/si6networks-ipv6-nd-assessment.pdf>

This document describes how you can employ our IPv6 toolkit
(<http://www.si6networks.com/ipv6toolkit/>) to perform a number of
attacks against IPv6 Neighbor Discovery implementations, and contains
cross-reference to the IETF I-D mentioned above.

P.S.: If you are a vendor, I recommend you perform an assessment of your
implementation with respect to the identified issues.

Thanks!

Best regards,
-- 
Fernando Gont
e-mail: fernando@...t.com.ar || fgont@...networks.com
PGP Fingerprint: 7809 84F5 322E 45C7 F1C9 3945 96EE A9EF D076 FFF1

-- 
Fernando Gont
SI6 Networks
e-mail: fgont@...networks.com
PGP Fingerprint: 6666 31C6 D484 63B2 8FB1 E3C4 AE25 0D55 1D4E 7492

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/