[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Bypassing ISA Server 2004 with IPv6

To: bugtraq@xxxxxxxxxxxxxxxxx
Subject: Bypassing ISA Server 2004 with IPv6
From: Romain.Le.Guen@xxxxxxxxxxx
Date: 3 Apr 2006 15:08:55 -0000

When IPv6 is active on an interface of an ISA Server 2004, it seems that IPv6 
packets are not filtered and bypass the firewall.

I try to send an ICMP IPv4 packet through the network to ISA Server, this 
packet was dropped, then i try an ICMP IPv6 packet which successfully works !

The same kind of test was successfull with a TCP connection using IIS 6 and 
IPv6.


Romain Le Guen

Follow-Ups:
- Re: Bypassing ISA Server 2004 with IPv6
  - From: 3APA3A

Prev by Date: SYMSA-2006-002: McAfee WebShield SMTP Format String Vulnerability
Next by Date: Re: Flaw in commonly used bash random seed method
Previous by thread: SYMSA-2006-002: McAfee WebShield SMTP Format String Vulnerability
Next by thread: Re: Bypassing ISA Server 2004 with IPv6
Index(es):
- Date
- Thread