Re: IGNORING SSH CONNECTION USES ARP CACHE POISSONING

To: king_purba@xxxxxxxxxxx
Subject: Re: IGNORING SSH CONNECTION USES ARP CACHE POISSONING
From: Thierry Zoller <Thierry@xxxxxxxxx>
Date: Tue, 9 May 2006 23:19:18 +0200
Cc: bugtraq@xxxxxxxxxxxxxxxxx
In-reply-to: <20060509104818.20724.qmail@xxxxxxxxxxxxxxxxx>
List-help: <mailto:bugtraq-help@securityfocus.com>
List-id: <bugtraq.list-id.securityfocus.com>
List-post: <mailto:bugtraq@securityfocus.com>
List-subscribe: <mailto:bugtraq-subscribe@securityfocus.com>
List-unsubscribe: <mailto:bugtraq-unsubscribe@securityfocus.com>
Mailing-list: contact bugtraq-help@xxxxxxxxxxxxxxxxx; run by ezmlm
Organization: Kachkeis Liebhaber CoKG
References: <20060509104818.20724.qmail@xxxxxxxxxxxxxxxxx>
Reply-to: Thierry Zoller <Thierry@xxxxxxxxx>

Dear King purba,

Could you please provide more details abouve the specifics you see a
problem in here ?

From my point of view, if you poison the cache of a remote machine
the connection will go to the other machine, and if that machine does
no IP forwarding, well the connection dies, or times-out.

What specific SSH issue are you refering to here ?


-- 
http://secdev.zoller.lu
Thierry Zoller
Fingerprint : 5D84 BFDC CD36 A951 2C45  2E57 28B3 75DD 0AC6 F1C7

References:
- IGNORING SSH CONNECTION USES ARP CACHE POISSONING
  - From: king_purba

Prev by Date: [SECURITY] [DSA 1054-1] New TIFF packages fix denial of service and arbitrary code execution
Next by Date: IBM Websphere Application Server Multiple Vulnerabilities
Previous by thread: IGNORING SSH CONNECTION USES ARP CACHE POISSONING
Next by thread: Re: IGNORING SSH CONNECTION USES ARP CACHE POISSONING
Index(es):
- Date
- Thread