Networks on yellow alert over ICMP flaw

Friday, 15 April 2005, 12:15 AM EST

ISPs and enterprises were this week advised to update their internet communications infrastructure following the discovery of a vulnerability affecting a raft of major suppliers including Cisco, Juniper, Microsoft and IBM to varying degrees.

Security researchers have discovered that multiple TCP/IP implementations fail to adequately validate Internet Control Message Protocol (ICMP) error messages. As a result, hackers could reset or slow an established connection using spoofed ICMP error messages.

By John Leyden at The Register.

[ Read more ]




Spotlight

Most popular Android apps open users to MITM attacks

Posted on 21 August 2014.  |  An analysis of the 1,000 most popular free Android apps from the Google Play store has revealed a depressing fact: most of them sport an SSL/TLS vulnerability that can be misused for executing MITM attacks, and occasionally additional ones, as well.


Weekly newsletter

Reading our newsletter every Monday will keep you up-to-date with security news.
  



Daily digest

Receive a daily digest of the latest security news.
  

DON'T
MISS

Thu, Aug 21st
    COPYRIGHT 1998-2014 BY HELP NET SECURITY.   // READ OUR PRIVACY POLICY // ABOUT US // ADVERTISE //