IPSec Vulnerability Issue

FYI…

- http://isc.sans.org/diary.php?date=2005-05-08
Updated May 9th 2005 16:09 UTC
"NISCC has posted an advisory for IPSEC implementations. Seems that any configuration of IPSec that uses ESP, IP protocol 50 (Encapsulating Security Payload), with confidentiality (encryption) only is affected. In addition, reports of some configurations of AH (Authentication Header), IP protocol 51 are also affected.
The impact of this vulnerability is huge, as the attacker could get the plaintext version of the communication.

Principal workaround: Ensure that you use ESP with integrity protection…"

- http://www.niscc.gov.uk/niscc/docs/al-2005…86.html?lang=en
Vulnerability Issues with IPsec Configurations
Release Date 9 May 2005

FYI…

Not All VPN's Secure For wireless LAN
- http://www.mobilepipeline.com/showArticle….cleID=163700064
May 23, 2005
"A WLAN security vendor said Monday said that a flaw in certain virtual private networks (VPNs) can lead to security flaws that expose corporate data on wireless networks. Specifically, Newbury Networks cited a flaw initially found by the U.K.'s National Infrastructure Security Coordination Center in IPSec, a set of protocols frequently used to create VPNs. The potential threat results in a security hole in some configurations that enables attackers to divert VPN data after it's been decrypted. Because the data is intercepted as the traffic flows between security gateways, the threat is particularly severe for wireless LANs in which the decrypted information is passing over the air…"