Re: [OSPF] OSPF

İ totaly agree wit Michael its well known and this attack even can be done from several hops away . 

Best Regards,
Orhan ERGUN

On 2 Ağu 2013, at 20:56, Michael Barnes <mjbarnes@cisco.com> wrote:

> I don't think he has discovered anything revolutionary. It has been widely known for many years that if someone has control of a router, or links which are not protected by authentication, that there are many forms of mischief (e.g. insider attacks).
> 
> I found this slide from an IETF presentation in 1998 which lists a number of previous papers:
> https://www.ietf.org/proceedings/46/slides/ospf-sec/tsld003.htm
> 
> Some of the following slides explain a few possible exploits, all of which are "insider" attacks.
> 
> There is a well known IETF document which lists a number of OSPF vulnerabilities, however it is not a complete list:
> http://tools.ietf.org/id/draft-ietf-rpsec-ospf-vuln-02.txt
> 
> So I don't find this "briefing" very interesting. What would be interesting to me, would be a way to attack OSPF when SHA-256 authentication is deployed, beyond the known replay attacks.
> 
> Regards,
> Michael
> 
> On 08/02/2013 09:41 AM, Glen Kent wrote:
>> Hi,
>> 
>> Does anybody have details on what this OSPF vulnerability is?
>> 
>> https://www.blackhat.com/us-13/briefings.html#Nakibly
>> 
>> Glen
>> 
>> 
>> 
>> _______________________________________________
>> OSPF mailing list
>> OSPF@ietf.org
>> https://www.ietf.org/mailman/listinfo/ospf
>> 
> _______________________________________________
> OSPF mailing list
> OSPF@ietf.org
> https://www.ietf.org/mailman/listinfo/ospf

Re: [OSPF] OSPF - Owning the Routing Table Attack