Re: [OSPF] OSPF - Owning the Routing Table Attack

[Michael Barnes <[e-mail]>]

I don't think he has discovered anything revolutionary. It has been 
widely known for many years that if someone has control of a router, or 
links which are not protected by authentication, that there are many 
forms of mischief (e.g. insider attacks).

I found this slide from an IETF presentation in 1998 which lists a 
number of previous papers:
https://www.ietf.org/proceedings/46/slides/ospf-sec/tsld003.htm

Some of the following slides explain a few possible exploits, all of 
which are "insider" attacks.

There is a well known IETF document which lists a number of OSPF 
vulnerabilities, however it is not a complete list:
http://tools.ietf.org/id/draft-ietf-rpsec-ospf-vuln-02.txt

So I don't find this "briefing" very interesting. What would be 
interesting to me, would be a way to attack OSPF when SHA-256 
authentication is deployed, beyond the known replay attacks.

Regards,
Michael

On 08/02/2013 09:41 AM, Glen Kent wrote:
> Hi,
>
> Does anybody have details on what this OSPF vulnerability is?
>
> https://www.blackhat.com/us-13/briefings.html#Nakibly
>
> Glen
>
>
>
> _______________________________________________
> OSPF mailing list
> [e-mail]
> https://www.ietf.org/mailman/listinfo/ospf
>