Re: [fw-wiz] Tunnel intruder

From: David Kennedy CISSP (david.kennedyat_private)
Date: Fri Oct 11 2002 - 15:35:57 PDT

  • Next message: Darren Reed: "Re: [fw-wiz] Variations of firewall ruleset bypass via FTP"

    At 04:21 PM 10/9/02 -0700, Jim MacLeod wrote:
    
    >Does anybody know of an actual incident where this attack was used, 
    >successfully or not?
    
    http://www.securiteam.com/securitynews/Microsoft_Internal_Network_Hacked__So
    urce_Code_Stolen.html
    
    IIRC, an MS VP acknowledge that it was a contractor with VPN (PPTP?) access.
    
    
    -- 
    Regards,
    
    David Kennedy CISSP                         /"\
    Director of Research Services,              \ / ASCII Ribbon Campaign
    TruSecure Corp. http://www.trusecure.com     X  Against HTML Mail
    Protect what you connect;                   / \
    Look both ways before crossing the Net.
    
    _______________________________________________
    firewall-wizards mailing list
    firewall-wizardsat_private
    http://honor.icsalabs.com/mailman/listinfo/firewall-wizards
    



    This archive was generated by hypermail 2b30 : Sat Oct 12 2002 - 05:43:04 PDT