VPN flaw threatens Internet traffic

Email LinkedIn
Tools

A component of the popular IPsec protocol has a vulnerability that could clog networks or expose them to hijacking and remote code execution, researchers in Finland said. The component, Internet Security Association and Key Management Protocol, is used for cryptography. Cisco Systems, Juniper Networks and the Linux-based Openswan project each issued patches for the flaw. There is no word yet of documented exploits.

For more on the security glitch:
- check out this News.com article
- learn more from the ISAKMP RFC

ALSO: Juniper acquires Funk Software for $122 million. Article

PLUS: Symantec beats the research drum. Article